mappedsky/cve-response

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "description": "Automated CVE triage workflows, run headlessly by the Temporal cve_repo_report workflow from the scheduled query temporal action.",
  "extensions": {
    "com.mappedsky.seizu": {
      "skills": {
        "cve-repo-assessment": {
          "aliases": [
            "cve_response__cve_repo_assessment"
          ],
          "parameters": [
            {
              "default": null,
              "description": "Repository fullname (org/name) under assessment.",
              "name": "repo",
              "required": true,
              "type": "string"
            },
            {
              "default": null,
              "description": "JSON array of newly discovered CVE objects for this repository.",
              "name": "cves",
              "required": true,
              "type": "string"
            }
          ],
          "title": "CVE Repository Assessment",
          "triggers": [
            "evaluate new CVEs for a repository",
            "repository CVE assessment",
            "automated CVE triage"
          ]
        },
        "cve-severity-analysis": {
          "aliases": [
            "cve_response__cve_severity_analysis"
          ],
          "parameters": [
            {
              "default": 168,
              "description": "Lookback window in hours for recently published CVEs.",
              "name": "hours",
              "required": false,
              "type": "integer"
            }
          ],
          "title": "CVE Severity Analysis",
          "triggers": [
            "cve severity analysis",
            "cvss distribution",
            "cve score breakdown",
            "vulnerability risk distribution",
            "cve statistics",
            "cvss percentiles"
          ]
        },
        "dependency-provenance": {
          "aliases": [
            "cve_response__dependency_provenance"
          ],
          "parameters": [
            {
              "default": null,
              "description": "Package ecosystem in lower case \u2014 npm, cargo, maven, pypi, go, nuget, rubygems.",
              "name": "ecosystem",
              "required": true,
              "type": "string"
            },
            {
              "default": null,
              "description": "Package name as the ecosystem spells it, e.g. `botocore`.",
              "name": "package",
              "required": true,
              "type": "string"
            },
            {
              "default": null,
              "description": "Exact installed version, e.g. `1.42.91`. Not a range.",
              "name": "version",
              "required": true,
              "type": "string"
            },
            {
              "default": "",
              "description": "Optional. The package to look for in its dependency graph, e.g. `urllib3`. Empty means report the declared requirements instead of a path.",
              "name": "target",
              "required": false,
              "type": "string"
            }
          ],
          "title": "Dependency Provenance",
          "triggers": [
            "does this package pull in another",
            "why is this dependency installed",
            "is this a direct or transitive dependency",
            "what requires this package version",
            "check a dependency version pin or compatibility range",
            "trace a transitive dependency path"
          ]
        },
        "fetch-new-cves": {
          "aliases": [
            "cve_response__fetch_new_cves"
          ],
          "parameters": [
            {
              "default": 24,
              "description": "Number of hours to look back from now for newly published CVEs.",
              "name": "lookback_hours",
              "required": false,
              "type": "integer"
            }
          ],
          "title": "Fetch New CVEs",
          "triggers": [
            "fetch new CVEs",
            "get latest CVEs",
            "pull recent CVEs",
            "check for new CVEs",
            "CVE feed"
          ]
        }
      }
    }
  },
  "name": "cve-response",
  "version": "1.0.0"
}