Can this skill help if no patch is available for a CVE?

Yes, it includes a workflow for zero-day vulnerabilities that focuses on temporary mitigations, such as disabling vulnerable services, applying GPO changes, or deploying EDR detection rules.

Which vulnerability scanners are supported by this skill?

The skill is designed to work with findings exported from industry-standard scanners such as Tenable Nessus, Qualys VMDR, and Rapid7 InsightVM in CSV or XML formats.

How does the skill prioritize which vulnerabilities to fix first?

It uses a risk-based priority matrix that combines CVSS base scores, the Exploit Prediction Scoring System (EPSS) probability, and membership in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Does this skill support Linux and macOS endpoints?

While it includes heavy support for Windows environments via SCCM and PowerShell, it also covers cross-platform patch management through tools like Automox and generic vendor advisory tracking.

Endpoint Vulnerability Remediation

Name: Endpoint Vulnerability Remediation
Author: micsapp

bymicsapp

0•

安全与测试

Prioritizes, patches, and validates endpoint security vulnerabilities using risk-based scoring and automated deployment workflows.

The Endpoint Vulnerability Remediation skill provides a comprehensive framework for managing the lifecycle of security vulnerabilities on network endpoints. It enables Claude to ingest scan data from tools like Nessus or Qualys, prioritize findings using CVSS and EPSS scores, and generate actionable remediation steps. From deploying patches via SCCM or Intune to applying configuration-based mitigations for zero-day threats, this skill ensures that security teams can maintain compliance with strict SLAs while reducing the attack surface through validated, risk-aware fix deployment.

主要功能

01Risk-based prioritization using CVSS, EPSS, and CISA KEV data

02PowerShell scripts for configuration-based remediations and SMB/Print Spooler hardening

030 GitHub stars

04Patch deployment workflows for WSUS, SCCM, Intune, and Automox

05Zero-day mitigation strategies for vulnerabilities without available patches

06Automated validation scripts to confirm successful remediation and closure

使用场景

01Maintaining organizational compliance with internal patch management SLAs

02Responding to emergency CVE advisories with rapid-response patching or workarounds

03Remediating critical findings from enterprise vulnerability scan reports

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills performing-endpoint-vulnerability-remediation

For use in Claude.ai and ChatGPT

主要功能

01Risk-based prioritization using CVSS, EPSS, and CISA KEV data

02PowerShell scripts for configuration-based remediations and SMB/Print Spooler hardening

030 GitHub stars

04Patch deployment workflows for WSUS, SCCM, Intune, and Automox

05Zero-day mitigation strategies for vulnerabilities without available patches

06Automated validation scripts to confirm successful remediation and closure

使用场景

01Maintaining organizational compliance with internal patch management SLAs

02Responding to emergency CVE advisories with rapid-response patching or workarounds

03Remediating critical findings from enterprise vulnerability scan reports

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills performing-endpoint-vulnerability-remediation

For use in Claude.ai and ChatGPT