Skip to content
Get packs

Component Vulnerability Intelligence

Makes the agent search CVE databases, PoC repos and security sites for a identified component's known flaws before attempting exploits.

Source Download skill
Repository
AIPentest/CyberStrikeAI
Stars
8,323
Licence
Apache-2.0
Files
1 file

What it does

Once a web framework, component or version is identified during a test, this skill tells the agent to stop local scanning and run a fixed checklist of online searches: CVE databases, Google, Baidu, Bing, DuckDuckGo, Chinese security blogs, GitHub for proof-of-concept exploit code, internet asset search engines (FOFA, Shodan, ZoomEye, Censys), and social/news feeds. It also covers dependency lists and fallback tactics when searches are blocked, such as changing user-agent, using proxy services or archive sites. The results are treated as leads to verify, not confirmed facts.

Great for

  • Security professionals doing authorized penetration tests or red-team engagements who want a repeatable reconnaissance checklist
  • Students learning how public vulnerability research is gathered
  • Teams that want their agent to consistently document what public sources say about a component version

Skip it if

  • Testing systems you do not own or have written permission to assess, because the skill aims at finding and using exploits against identified targets and could enable unauthorized intrusion
  • Anyone expecting a safe, read-only research tool: it pushes the agent to hunt for public exploit code and asset exposure, and it routes to a zero-day discovery skill when nothing is found
  • Users who need offline work, since nearly every step requires live internet access

Try asking

  • “I found Apache Struts 2.5.10 on the target. Run the component vulnerability intelligence checklist before we try anything.”
  • “Identify known CVEs and public PoC repositories for this Jenkins version and summarise them as unverified leads.”
  • “Search Chinese security communities and English sources for exploit write-ups on this WordPress plugin version.”
Step-by-step guide: how to use Component Vulnerability IntelligenceInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    component-vuln-intel.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip component-vuln-intel.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip component-vuln-intel.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this skill inside an authorised scope, and have the agent record which sources were checked and that findings are unverified until tested in scope.
  • Provide an accurate component name and exact version, since the search queries are built from those values and vague input gives noisy results.
  • Review the proxy and bypass steps before allowing them, because they route traffic through third-party services and may conflict with the target's rules of engagement.

What's inside

  • SKILL.md

Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.