x-kev
CISA Known Exploited Vulnerabilities (KEV) catalog. List actively exploited vulnerabilities prioritized by CISA. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
- License 许可
- Apache-2.0
- 最近更新
- 2026-09-19
- Stars
- ★ 2
- Forks
- 0
01 前言 Front Matter
- name
- x-kev
- license
- Apache-2.0
- metadata
- { "tags": [ "x-cmd", "security", "kev", "cisa", "vulnerability" ], "author": "Li Junhao", "version": "1.0.0", "category": "x-cmd-extension" }
- description
- CISA Known Exploited Vulnerabilities (KEV) catalog. List actively exploited vulnerabilities prioritized by CISA. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
- compatibility
- POSIX Shell
03 SKILL.md 正文
x kev - Known Exploited Vulnerabilities
CISA KEV Catalog - Known Exploited Vulnerabilities listing.
Quick Start
# List all KEV vulnerabilities
x kev ls
# List top 100 KEVs
x kev top 100
Features
- CISA KEV Catalog: Official CISA Known Exploited Vulnerabilities
- Prioritized Remediation: Focus on actively exploited vulnerabilities
- Simple Interface: List and filter KEV entries
Commands
| Command | Description |
|---|---|
x kev ls |
List all vulnerabilities in KEV catalog |
x kev top [n] |
List top N vulnerabilities |
Examples
List KEVs
# List all KEV vulnerabilities
x kev ls
# Get top 50
x kev top 50
# Get top 100
x kev top 100
About KEV
The CISA Known Exploited Vulnerabilities (KEV) catalog contains vulnerabilities that:
- Have been assigned CVE IDs
- Have been actively exploited in the wild
- Have clear remediation actions
Reference: CISA KEV Catalog
Why KEV Matters
- Prioritization: Not all CVEs are equally critical
- Active Exploitation: KEV focuses on vulnerabilities being actively used by attackers
- Compliance: US federal agencies required to patch KEVs within specified timeframes
- Risk Reduction: Addressing KEVs provides immediate security improvement
Related
04 同仓库更多 Skills
vercel-react-view-transitions
Guide for implementing smooth, native-feeling animations using React's View Transition API (`<ViewTransition>` component, `addTransitionType`, and CSS view transition pseudo-elements). Use this skill whenever the user wants to add page transitions, animate route changes, create shared element animations, animate enter/exit of components, animate list reorder, implement directional (forward/back) navigation animations, or integrate view transitions in Next.js. Also use when the user mentions view transitions, `startViewTransition`, `ViewTransition`, transition types, or asks about animating between UI states in React without third-party animation libraries.
vercel-react-best-practices
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
terraform-patterns
Implement — Terraform infrastructure-as-code agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Covers module design patterns, state management strategies, provider c
self-eval
Implement — Honestly evaluate AI work quality using a two-axis scoring system. Use after completing a task, code review, or work session to get an unbiased assessment. Detects score inflation,
helm-chart-builder
Implement — Helm chart development agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw — chart scaffolding, values design, template patterns, dependency management, sec
docker-development
Implement — Docker and container development agent skill and plugin for Dockerfile optimization, docker-compose orchestration, multi-stage builds, and container security hardening. Use when: u