{"slug":"dependency-cve-triage","source_name":"dependency-cve-triage","name":"Dependency CVE Triage","description":"Triages a known CVE in a dependency by reachability and exposure — is the vulnerable code actually reached, is it fed untrusted input, does a fix exist — to decide fix-now vs schedule vs document-as-not-affected, instead of acting on the CVSS number alone. Use when a scanner, Dependabot alert, or audit flags a specific known vulnerability in a library you depend on and you must decide what to do about it. Do NOT use for reviewing a routine version bump, picking a new library, or reviewing application source code for its own vulnerabilities.","version":1,"lift":{"pass_rate_delta_pts":null,"pass_rate_pct":30.8,"total_cases":13,"passed_cases":4,"tokens_delta_pct":331.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.5-flash","grading_method":"judged","completed_at":"2026-07-08T22:51:54.741937+00:00"},"skill_score":1,"benchmark_models":[{"model":"gemini-3.5-flash","headline":false,"delta_pts":null,"with_pass_pct":null,"without_pass_pct":null,"tokens_delta_pct":331.1,"turns_delta_pct":0,"total_cases":13,"cases_aggregated":13,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-08T22:51:54.741937+00:00","run_id":"27c6789f-3374-4646-b079-17cf7a3c6658","latest_attempt":{"id":"27c6789f-3374-4646-b079-17cf7a3c6658","runner_model":"gemini-3.5-flash","overall_verdict":"mixed","completed_at":"2026-07-08T22:51:54.741937+00:00","gate":"not_comparable"},"version_number":1,"is_latest_version":true,"gate":"not_comparable"}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":false},"license":null,"install_count":0,"total_uses":115,"total_users":3,"manifest_hash":"90a6846b9267142589a45a123f794a3d0a9be8bca9dbba72e93fb773fc0ad0e0","install_name":"dependency-cve-triage","version_id":"b2ce51ce-01cd-46bc-91c9-fb2e1b56f596","body_sha256":"206f1dbe4550abc9863474f6f7e728cd22c3cc342f2448df9b71bfd7731fd675","render_hash":"e0eb8d8b17b53ee20f67edb3c26c9fe7238a2c75d5d5ba0211c70b7c3c32a0fb","raw_url":"https://app.decimal.ai/s/dependency-cve-triage/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/dependency-cve-triage"}