[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6KFFVT4WJTSRCA2DNAVFNHV":3,"skill-same:01M6KFFVT4WJTSRCA2DNAVFNHV":57},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":30,"linkOnly":31,"markdownContent":32,"markdownBody":33,"frontMatter":34,"refName":35,"commitSha":36,"skillDirectory":37,"forksCount":38,"repositoryHtmlUrl":39,"repositoryHomepageUrl":40,"ownerHtmlUrl":41,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":42,"install":43,"resources":56},"01M6KFFVT4WJTSRCA2DNAVFNHV","run2_cvss-score",null,"Extract CVSS v3 scores from Trivy vulnerability data with source priority fallback (NVD > GHSA > RedHat) and handle missing data gracefully.","cxcscmu\u002FSkillLearnBench","cxcscmu","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F142838272?v=4","01M6KCQDFQWPDSN0MKZY96MSQP","01M6KCQDM7G70TKJ28NTSQC0RZ",92,"MIT","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fb2-self-feedback-claude-opus-4-6\u002Fdependency-vulnerability-check\u002Frun2_cvss-score\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29],"cvss","run2 cvss score","data","NVD","trivy","vulnerability","extract","fallback","v3","missing","with","source","2026-11-10 10:12:30",false,"---\nname: run2_cvss-score\ndescription: Extract CVSS v3 scores from Trivy vulnerability data with source priority fallback (NVD > GHSA > RedHat) and handle missing data gracefully.\n---\n\n# CVSS Score Extraction from Trivy Data\n\n## CVSS Sources in Trivy Output\nTrivy provides CVSS scores from multiple sources in the `CVSS` field:\n- **nvd**: National Vulnerability Database (most authoritative)\n- **ghsa**: GitHub Security Advisory\n- **redhat**: Red Hat security team\n\nNot all sources are present for every vulnerability.\n\n## Recommended Priority: NVD > GHSA > RedHat\nNVD is the standard reference. GHSA is widely used for npm\u002FGitHub ecosystems. RedHat is useful as a fallback.\n\n## Python Implementation\n```python\ndef get_cvss_score(vuln):\n    \"\"\"Extract best available CVSS v3 score with source priority fallback.\"\"\"\n    cvss = vuln.get(\"CVSS\") or {}\n    for source in [\"nvd\", \"ghsa\", \"redhat\"]:\n        entry = cvss.get(source)\n        if entry:\n            score = entry.get(\"V3Score\")\n            if score is not None:\n                return score\n    return \"N\u002FA\"\n```\n\n## Real-world examples from npm scanning\n- CVE-2024-29415 (ip): Only ghsa (8.1) and redhat (9.8) — no NVD score → returns 8.1\n- CVE-2022-25883 (semver): All three sources at 7.5 → returns 7.5\n- CVE-2026-23745 (tar): Only redhat (8.2) → returns 8.2\n","# CVSS Score Extraction from Trivy Data\n\n## CVSS Sources in Trivy Output\nTrivy provides CVSS scores from multiple sources in the `CVSS` field:\n- **nvd**: National Vulnerability Database (most authoritative)\n- **ghsa**: GitHub Security Advisory\n- **redhat**: Red Hat security team\n\nNot all sources are present for every vulnerability.\n\n## Recommended Priority: NVD > GHSA > RedHat\nNVD is the standard reference. GHSA is widely used for npm\u002FGitHub ecosystems. RedHat is useful as a fallback.\n\n## Python Implementation\n```python\ndef get_cvss_score(vuln):\n    \"\"\"Extract best available CVSS v3 score with source priority fallback.\"\"\"\n    cvss = vuln.get(\"CVSS\") or {}\n    for source in [\"nvd\", \"ghsa\", \"redhat\"]:\n        entry = cvss.get(source)\n        if entry:\n            score = entry.get(\"V3Score\")\n            if score is not None:\n                return score\n    return \"N\u002FA\"\n```\n\n## Real-world examples from npm scanning\n- CVE-2024-29415 (ip): Only ghsa (8.1) and redhat (9.8) — no NVD score → returns 8.1\n- CVE-2022-25883 (semver): All three sources at 7.5 → returns 7.5\n- CVE-2026-23745 (tar): Only redhat (8.2) → returns 8.2\n",{"name":5,"description":7},"main","726e1f79b96b0cb3d729d0e55a1c847e0b5353ae","skills\u002Fb2-self-feedback-claude-opus-4-6\u002Fdependency-vulnerability-check\u002Frun2_cvss-score",7,"https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench","https:\u002F\u002Fcxcscmu.github.io\u002FSkillLearnBench","https:\u002F\u002Fgithub.com\u002Fcxcscmu","2026-10-02 22:55:36",{"source":8,"skillName":5,"commands":44,"prompt":54,"zipAvailable":55},[45,48,51],{"tool":46,"command":47},"npx","npx skills add cxcscmu\u002FSkillLearnBench --skill run2_cvss-score",{"tool":49,"command":50},"bunx","bunx skills add cxcscmu\u002FSkillLearnBench --skill run2_cvss-score",{"tool":52,"command":53},"pnpm","pnpm dlx skills add cxcscmu\u002FSkillLearnBench --skill run2_cvss-score","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fb2-self-feedback-claude-opus-4-6\u002Fdependency-vulnerability-check\u002Frun2_cvss-score\u002FSKILL.md",true,[],[58,76,101,119,139,151],{"skillNo":59,"name":60,"nameZh":6,"description":61,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":62,"categories":63,"keywords":69,"publishedAt":30},"01M6KM5KH175P5ABP5JMX2SBDQ","object_counter","Count occurrences of an object in the image using computer vision algorithm.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Fvideo-object-counting\u002Fobject_counter\u002FSKILL.md",[64],{"categoryNo":65,"categoryName":66,"taxonomyType":67,"taxonomyTypeDesc":68},"01JBSEEDCAT000000000000016","图像与多媒体","SCENARIO","使用场景",[70,71,72,73,74,75],"object counter","object","vision","computer","Computer Vision","image",{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":85,"publishedAt":30},"01M6KM51TMVXG79MMPCS6Y8G86","travel-planning-workflow","Invoke this skill when performing travel planning. It defines a structured workflow for generating itineraries. Following this workflow is essential to ensure the final plan satisfies user requirements.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftravel-planning\u002Ftravel-planning-workflow\u002FSKILL.md",[82],{"categoryNo":83,"categoryName":84,"taxonomyType":67,"taxonomyTypeDesc":68},"01JBSEEDCAT000000000000023","Skill与智能体开发",[86,87,88,89,90,91,92,93,94,95,96,97,98,99,100],"workflow","planning","planning workflow","travel","travel planning","travel planning workflow","structured","performing","plan","for","user","it","requirements","essential","itineraries",{"skillNo":102,"name":103,"nameZh":6,"description":104,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":105,"categories":106,"keywords":107,"publishedAt":30},"01M6KM4DY820XHS9YTSK5QP5HD","bundled-dataset-search-tool","invoke this skill when you need to perform database search for travel planning. This skill provides some useful pre-packaged tools to look up accommodations, attractions, cities, driving distance, flights, and restaurants from the bundled dataset.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftravel-planning\u002Fbundled-dataset-search-tool\u002FSKILL.md",[],[108,109,110,111,112,113,114,89,115,116,90,117,95,118,87],"search","tool","dataset","bundled dataset search tool","restaurants","Tools","up","look","flights","you","database",{"skillNo":120,"name":121,"nameZh":6,"description":122,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":123,"categories":124,"keywords":125,"publishedAt":30},"01M6KM465BB9PQ0B548HQSVAWZ","glm-output","Output-processing guidance for GLM tasks. Especially useful after glm-basics and glm-calibration when you need verifier-matching metrics from output.nc and a final \u002Froot\u002Fmetrics.json.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftemperature-simulation\u002Fglm-output\u002FSKILL.md",[],[126,127,128,95,129,130,131,132,133,134,135,136,117,137,138],"glm output","output","glm","tasks","metrics","json","basics","guidance","matching","verifier","processing","root","calibration",{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":143,"categories":144,"keywords":146,"publishedAt":30},"01M6KM40KY3QWDW5W97S39R2BC","glm-calibration","Calibration guidance for GLM tasks. Often most effective after glm-basics has clarified the setup; glm-output is the companion skill for exact final metric computation.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftemperature-simulation\u002Fglm-calibration\u002FSKILL.md",[145],{"categoryNo":83,"categoryName":84,"taxonomyType":67,"taxonomyTypeDesc":68},[147,138,128,127,133,132,129,148,149,95,150],"glm calibration","setup","companion","metric",{"skillNo":152,"name":153,"nameZh":6,"description":154,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":155,"categories":156,"keywords":157,"publishedAt":30},"01M6KM3VHHVSGMGHJQB3PPT6YG","glm-basics","A good starting point for GLM calibration tasks. Use to inspect glm3.nml, confirm how GLM runs, and identify the relevant files before moving on to calibration and output evaluation.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftemperature-simulation\u002Fglm-basics\u002FSKILL.md",[],[158,128,132,159,147,138,95,127,160,161,162,163,164,165,129],"glm basics","inspect","relevant","files","good","use","how","Evaluation"]