Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

CVE PoC Generator · transilienceai | DecimalAI

securityby transilienceai

CVE PoC Generator

transilienceai/cve-poc-generator

Source transilienceai/communitytools ↗License MIT

CVE research, standalone PoC script and report generation. Given a CVE ID, researches NVD and advisories, generates a safe Python PoC, and writes a detailed vulnerability report.

SkillScore77Maintained

Automatic

Security & AppSec pack

Last verified 8/18/2026

What it changes

Passed 16 of 21 test cases with the skill, and 8 of 21 without it.

Without skill36%

With skill77%

Checks it passed that the model alone missed

The severity styling forbids emojis
The script forbids framework dependencies
The execution requires an explicit --confirm flag

and 6 more in the full report

9 fixed8 passed either way5 still failing0 broke

Pass-rate lift: +41 pp
Tokens: -7%
Agent turns: 0%
Response time: -39%

Model gemini-3.6-flashMeasured 8/18/2026v117 of 22 cases passed with skill · 21 comparable

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/transilienceai-cve-poc-generator/SKILL.md https://app.decimal.ai/s/transilienceai-cve-poc-generator/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add transilienceai-cve-poc-generator, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/transilienceai-cve-poc-generator/ and pins it in .decimal/skills.lock

decimalai skills add transilienceai-cve-poc-generator

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/transilienceai-cve-poc-generator/SKILL.md https://app.decimal.ai/s/transilienceai-cve-poc-generator/SKILL.md

Raw file: /s/transilienceai-cve-poc-generator/SKILL.md ↗ · machine-readable summary at /s/transilienceai-cve-poc-generator.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 9

Prompt

What CLI command queries the NVD v2.0 endpoint for details on CVE-2024-21626?

What was checked, without and with the skill
Checked	Without skill	With skill
The command invoked is python3 tools/nvd-lookup.py CVE-2024-21626	Missed	Passed

case-18 · gemini-3.6-flash · 8/18/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md51 linessingle file

CVE PoC Generator

Research a CVE by ID, generate a standalone Python proof-of-concept script, and produce a detailed vulnerability report.

Workflow

NVD Lookup - Query NVD API v2.0 for the CVE ID (python3 tools/nvd-lookup.py <CVE>). Extract the CVSS score/vector using the v4.0-primary ladder (v4.0 → v3.1 → v3.0 → v2.0; the tool's JSON_SUMMARY exposes cvss_version + cvss_vector), plus CWE IDs, CPE matches, advisory URLs, and patch links.
Advisory Research - Deep-dive vendor advisories, GitHub security advisories, Exploit-DB, and published write-ups. Identify root cause, affected versions, and attack vector details.
PoC Generation - Write a standalone Python script (poc.py) that demonstrates the vulnerability safely. Follow the script standards in reference/poc-methodology.md.
Report Generation - Write a comprehensive markdown report (report.md) with metadata, root cause analysis, risk assessment, and remediation guidance.

NVD Data to Collect

Field	Source	Usage
CVE ID	NVD	Primary identifier
CVSS Score + Vector (v4.0 primary; v3.1/v3.0/v2.0 fallback)	NVD	Risk scoring
CWE ID(s)	NVD	Vulnerability classification
CPE Matches	NVD	Affected products and versions
Advisory URLs	NVD references	Research sources
Patch Links	NVD references / vendor	Remediation guidance
Description	NVD	Vulnerability summary
Published / Modified dates	NVD	Timeline

Output

{OUTPUT_DIR}/
  artifacts/cve-pocs/CVE-XXXX-XXXXX/
    poc.py              # Standalone Python PoC script
  reports/cve-pocs/CVE-XXXX-XXXXX/
    report.md           # Detailed vulnerability report

Invocation

/cve-poc-generator CVE-2024-XXXXX

Track record

Benchmark

16 / 21

test cases passed, vs 8 / 21 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

transilienceai / communitytools

skills/cve-poc-generator/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

CVE PoC Generator

Workflow

NVD Data to Collect

Output

Invocation

Track record

Benchmark

Adoption

SkillSafety

Source

Related skills