Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
CVE vulnerability lookup via NIST NVD, CISA KEV, EPSS scores, and MITRE ATT&CK. 7 tools for real-time cybersecurity intelligence.
CVE vulnerability lookup via NIST NVD, CISA KEV, EPSS scores, and MITRE ATT&CK. 7 tools for real-time cybersecurity intelligence.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Real-time vulnerability intelligence from 4 authoritative sources — no API keys required.
Connect to the remote MCP server: mcporter add gov-cyber --url https://cybersecurity-vuln-mcp.apify.actor/mcp --transport streamable-http Or add directly to your OpenClaw MCP config (~/.openclaw/mcp.json): { "servers": { "gov-cyber": { "url": "https://cybersecurity-vuln-mcp.apify.actor/mcp", "transport": "streamable-http" } } }
Look up a CVE by ID and get enriched intelligence from all 4 sources in a single call — NVD details (CVSS score, description, references), CISA KEV active exploitation status, EPSS exploitation probability, and MITRE ATT&CK techniques. Look up CVE-2021-44228 Example output: CRITICAL 10.0, EPSS 94.4%, KEV=YES, ATT&CK: T1190/T1203/T1595.002
Search the NIST National Vulnerability Database by keyword, severity, and date range. Search NVD for "apache log4j" critical vulnerabilities Parameters: keyword, severity (LOW/MEDIUM/HIGH/CRITICAL), pubStartDate, pubEndDate, limit
Get recently added entries from the CISA Known Exploited Vulnerabilities catalog — confirmed actively exploited in the wild. Show KEV entries added in the last 7 days Parameters: days (1-365, default 7), limit
Get CISA KEV vulnerabilities with upcoming remediation deadlines. Federal agencies must patch by the due date. Show KEV vulnerabilities due within 14 days Parameters: days (1-90, default 14), limit
Get CVEs with the highest EPSS exploitation probability scores. A score of 0.9 = 90% chance of exploitation in the next 30 days. Show CVEs with EPSS score above 0.9 Parameters: threshold (0-1, default 0.5), limit
Get recently published critical and high severity CVEs. Stay on top of emerging threats. Show trending critical CVEs from the last 3 days Parameters: days (1-30, default 3), severity, limit
Search CVEs for a specific vendor/product with KEV cross-referencing for actively exploited vulns. Show Microsoft Windows vulnerabilities Parameters: vendor (required), product (optional), limit
NIST NVD 2.0 — National Vulnerability Database (CVE details, CVSS scores) CISA KEV — Known Exploited Vulnerabilities catalog FIRST.org EPSS — Exploitation Prediction Scoring System MITRE ATT&CK — Adversary techniques and tactics (172 CVEs mapped to 42 techniques)
Vulnerability triage and prioritization Compliance tracking (CISA KEV deadlines) Vendor risk assessments Threat intelligence briefings Patch management decisions All data from free US government APIs. Zero cost. No API keys required.
Data access, storage, extraction, analysis, reporting, and insight generation.
Largest current source with strong distribution and engagement signals.