# Redteam Cve Validation

> CVE validation domain card. Use after CVE lookup has produced applicable or candidate CVEs and red-team mode needs scoped evidence to decide whether to continue, pivot, or report.

- **Type:** Skill
- **Install:** `agentstack add skill-netw0rknoob-vulnclaw-redteam-cve-validation`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Netw0rkNoob](https://agentstack.voostack.com/s/netw0rknoob)
- **Installs:** 0
- **Category:** [Security](https://agentstack.voostack.com/c/security)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Netw0rkNoob](https://github.com/Netw0rkNoob)
- **Source:** https://github.com/Netw0rkNoob/VulnClaw/tree/main/vulnclaw/skills/specialized/redteam-cve-validation
- **Website:** https://unclecheng-li.github.io/vulnclaw.com

## Install

```sh
agentstack add skill-netw0rknoob-vulnclaw-redteam-cve-validation
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# CVE Validation

## Domain

Validate candidate CVEs against the current target evidence without assuming exploitability.
The module consumes `cve_candidate_list`, product/version evidence, service fingerprints, and scope data, then decides whether the CVE path is usable, patched, not applicable, or needs more recon.

## Trigger

```text
cve_candidate_list_ready
```

## Feedback Gates

- Scope Gate: target and asset must be in the declared authorization boundary.
- Evidence Gate: candidate CVE must map to observed product, version, endpoint, service, or fingerprint evidence.
- Applicability Gate: version range, configuration, and reachable component must plausibly match.
- Patch Gate: observed version or vendor advisory must not prove the issue fixed.
- Execution Gate: active validation requires a registered scoped adapter; missing adapters block rather than pretending execution happened.

## Boundaries

- Do not run destructive or broad exploit attempts.
- Do not validate outside the declared target and scope.
- Do not treat CVE names alone as proof.
- Prefer passive or low-noise confirmation first.
- If evidence is insufficient, return to recon or CVE lookup rather than guessing.

## Pivot Hints

- Candidate has no product/version match -> return to recon-intake for better fingerprinting.
- Candidate is patched or not applicable -> route by highest-ranked attack surface from recon.
- Tool or adapter missing -> record missing capability and request/choose an equivalent adapter.
- Too many candidates -> rank by reachable component, confidence, impact, and version fit.

## Exit Conditions

- Confirmed applicable candidate -> continue to the specific validation/testing skill.
- All candidates patched/not applicable -> exit to evidence-based router.
- Evidence incomplete -> return to recon-intake or cve-lookup.
- Required tool/scope/adapter missing -> block with the missing capability or scope evidence.

## Exit Evidence

- Required: cve_validation_result
- Optional: cve_patch_status, applicability_proof, non_applicability_reason
- min_attempts: 1

## Capabilities

```text
cve_applicability     -> cve_validation_result
patch_status_check    -> cve_patch_status
page_fetch            -> applicability_proof
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Netw0rkNoob](https://github.com/Netw0rkNoob)
- **Source:** [Netw0rkNoob/VulnClaw](https://github.com/Netw0rkNoob/VulnClaw)
- **License:** MIT
- **Homepage:** https://unclecheng-li.github.io/vulnclaw.com

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-netw0rknoob-vulnclaw-redteam-cve-validation
- Seller: https://agentstack.voostack.com/s/netw0rknoob
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.