patch-prioritization - Prioritize patches and manage remediation SLAs
Prioritizes vulnerability patches and manages remediation SLAs using SSVC 2.1, EPSS v3 trends, and CISA KEV data.
Tags
Updated: 2026-10-16Capabilities
Typical Outputs
What this skill does
- Deduplicate vulnerability findings
- Enrich findings with risk data
- Map findings to assets
- Flag SLA breaches
- Assign remediation SLA tiers
- Analyze EPSS score trends
- Assess compensating controls
- Schedule patch windows
- Manage remediation exceptions
- Document risk acceptance
Inputs
- Vulnerability inventory
- Current SLA assignments
- Asset inventory context
- Patch availability
- Change management constraints
- Compensating controls inventory
- Compliance mandates
- Historical EPSS data
- CVE triage output
- Target file or directory
Outputs
- Prioritized patch plan
- SLA assignments
- SLA breach flags
- Patch window schedule
- Exception documentation
- Risk acceptance artifacts
Requirements
- Read, Grep, and Glob tools
- Access to EPSS API
