Cve Diff — Security skill for Claude Code
CVE patch discovery — find, acquire, and diff the fix commit for a CVE.
How to install Cve Diff
Installs to ~/.claude/commands/dandye-gadievron__raptor-cve-diff.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/dandye/gadievron__raptor/HEAD/.claude/commands/cve-diff.md -o ~/.claude/commands/dandye-gadievron__raptor-cve-diff.md Restart Claude Code, or start a new session, for it to be picked up.
What Cve Diff does
description: CVE patch discovery — find, acquire, and diff the fix commit for a CVE dispatch: libexec/raptor-cve-diff [args]
/cve-diff — CVE Patch Discovery Pipeline
Discovers the canonical fix commit for a CVE, clones the repository, extracts the fix diff, and produces an analysis report. Fully agentic — an LLM tool-use loop searches OSV, NVD, GitHub, cgit, and GitLab to find the fix, then verifies it exists before submitting.
Arguments
If the user provides a CVE I
Alternatives in Security
- Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
- Engage.Cvediff — Find the canonical fix commit(s) for a CVE across sources, then diff for root cause 348 ★
- Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Gsd Audit Fix
Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit
Cve Env
Agentic CVE → Docker environment builder: given a CVE ID, builds and verifies a Docker environment running the
Qc DevOps Review
Act as a full QC/DevOps review team on a repo, branch, PR, or diff - static analysis, type checks, test suites
Diff Audit
PR / commit-scoped differential audit — audits only changed functions (plus 1-hop callers), flags removed secu
Security Audit
Audit de securite complet d'une web app (OWASP Top 10, CWE/CVE, headers, auth, paywall, infra). Genere un rapp
Self Review
Run a full self-review-and-fix loop on the current changes. Checks tests, lint, and security — fixing each iss
Related Agents
Dependency Doctor
Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps.
Infra Vuln Management
CVE prioritization and patch sequencing. Mostly mechanical lookups against your inventory. Peer to infra-secur
A14 Maintenance
A14 MAINT — Owns patch tasks, dependency bumps, tech-debt register and EOL tracking. Use for hotfix root-cause