Samhsu Dev Cve Skill Skills Cve Lookup

---
name: cve-lookup
description: Look up CVE IDs in the official CVEListV5 repository. Fetches JSON records, extracts description, CWE, vendor/product, CVSS, and classifies business logic relevance. Use when verifying CVE entries or enriching CVE datasets.
allowed-tools: Bash, Read, Write, Edit, Grep, Glob
argument-hint: <CVE-ID> [CVE-ID...]
---

# cve-lookup — CVEListV5 Record Fetcher

## Step 1: Fetch CVE records

```bash
python3 ${CLAUDE_SKILL_DIR}/../../scripts/fetch.py $ARGUMENTS
```

Output: JSON array. Each record contains:
- `cve_id`, `state`, `description`, `cwe`, `vendor`, `product`, `versions`, `cvss_score`, `cvss_severity`, `references`
- `match`: `YES` | `LIKELY` | `PARTIAL` | `NO` | `ERROR`
- `error` (present only on fetch failure)

## Step 2: Present results

For each record:

```
## {cve_id}

- **State**: {state}
- **Vendor**: {vendor}
- **Product**: {product}
- **Versions**: {versions joined}
- **Description**: {description}
- **CWE**: {cwe}
- **CVSS**: {cvss_score} / {cvss_severity}
- **Match**: {match}
- **References**:
  - {each reference URL}
```

For error records: `## {cve_id} — NOT FOUND ({error})`

## Step 3: Summary table

```
| CVE ID | State | Vendor/Product | CWE | CVSS | Match |
```

## Step 4: Analysis (agent reasoning)

Only if the user's context suggests verification against an existing dataset:
- Compare fetched vendor/product against the dataset's `platform` column.
- Flag mismatches between fetched CWE and dataset CWE.
- Recommend additions or removals based on `match` classification.