---
title: "cve - skill0 - Air Market"
description: "Someone hands you a vulnerability id and you need to know what it is. This looks the record up for you, with no API key and no sign-up. Results are cached, so repeat lookups do not go out again. Reac…"
canonical: "https://airmarket.ai/app/cve"
---

[Air Market](/) / [Security](/category/security) / cve - skill0

Skill by [x-cmd](/@x-cmd)

# cve - skill0

Pull up a vulnerability record without hunting for an API key

## What this does

Someone hands you a vulnerability id and you need to know what it is. This looks the record up for you, with no API key and no sign-up. Results are cached, so repeat lookups do not go out again. Reach for it when you are reading a security advisory and need the details behind the number.

### Top 3 things it does for you

- Look up a CVE by its id
- Check whether a vulnerability is known exploited
- See the exploit-likelihood score for a vulnerability

## Information

**cve - skill0 at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [x-cmd](/@x-cmd) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Version | 0.1.0 |
| Size | 2 KB |
| Licence | Apache-2.0 |
| Repository | [x-cmd/x-cmd](https://github.com/x-cmd/x-cmd/tree/6bf8f86bbb0d0acde4ed54877ce3d3b0acc7df74/mod/skill0/lib/skill0/data/cve) |
| GitHub stars | 4,584 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of cve - skill0 and flagged nothing. AIR's verdict: **safe**.

**What cve - skill0's check was run against**

|  |  |
| --- | --- |
| Commit | 6bf8f86bbb0d0acde4ed54877ce3d3b0acc7df74 |
| Content hash | 7c879c1ac7b1fe15db2a3ffbba3eaa59b2162473720140abda4463d33d131096 |
| Files read | [Browse the files at this exact commit](https://github.com/x-cmd/x-cmd/blob/6bf8f86bbb0d0acde4ed54877ce3d3b0acc7df74/mod/skill0/lib/skill0/data/cve/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for cve - skill0](/security/cve)

## About cve - skill0

Look up CVE records through `x cve`. Lookups are cached and need no API key, drawing on a daily TSV.

It loads for CVE ids, vulnerability identifiers, KEV, EPSS, NVD, the CVE list, and security advisories.

## What's inside

- SKILL.md - instructions

## Questions

### Is cve - skill0 safe to install?

AIR scanned this exact version of cve - skill0 and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 6bf8f86bbb0d, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/cve.

### How do I install cve - skill0?

Open https://airmarket.ai/app/cve on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/x-cmd/x-cmd/tree/6bf8f86bbb0d0acde4ed54877ce3d3b0acc7df74/mod/skill0/lib/skill0/data/cve. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by x-cmd](/@x-cmd)

---

Canonical URL: <https://airmarket.ai/app/cve>