Validates CVE identifiers and verifies automated remediation availability through Red Hat Lightspeed.
The CVE Validation skill provides a robust framework for auditing security vulnerabilities within Red Hat environments. By interfacing directly with Red Hat Lightspeed via MCP, it verifies CVE existence, retrieves critical metadata like CVSS scores and severity levels, and identifies if automated Ansible remediation playbooks are available. This skill serves as a critical pre-flight check in security workflows, ensuring that developers and SREs have accurate vulnerability data before committing to remediation planning or execution.
主要功能
01Strict regex-based CVE format validation (CVE-YYYY-NNNNN)
02Automated remediation availability checking for Ansible playbooks
03Integrated prerequisite validation for MCP server connectivity
04Real-time metadata retrieval from Red Hat Security Data
05Red Hat specific severity classification and CVSS mapping
064 GitHub stars
使用场景
01Determining if a CVE has an associated Red Hat Security Advisory (RHSA)
02Verifying if a specific security vulnerability affects a RHEL environment
03Pre-validating a list of vulnerabilities before initiating full-scale patching
