hypnguyen1209

Engage.Cvediff — Security skill for Claude Code

Security community

Find the canonical fix commit(s) for a CVE across sources, then diff for root cause.

How to install Engage.Cvediff

Installs to ~/.claude/skills/hypnguyen1209-offensive-claude-engage.cvediff/SKILL.md

Terminal

mkdir -p ~/.claude/skills/hypnguyen1209-offensive-claude-engage.cvediff && curl -fsSL https://raw.githubusercontent.com/hypnguyen1209/offensive-claude/HEAD/commands/engage.cvediff.md -o ~/.claude/skills/hypnguyen1209-offensive-claude-engage.cvediff/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Engage.Cvediff does

description: Find the canonical fix commit(s) for a CVE across sources, then diff for root cause

/engage.cvediff

Locates the fix commit(s) for a CVE across OSV / NVD / GitHub Advisories, de-duplicates them, and optionally clones (scope-gated, hardened) to emit `git diff fix^..fix` — the start of n-day patch diffing. Feeds `skills/reverse-engineering/references/patch-diffing-protocol.md` and can chain into `/engage.crash` for root-cause + exploitability.

Usage

`/engage.cvediff

Alternatives in Security

Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
Fix Secdeps — Audit and fix Dependabot security vulnerabilities across the monorepo 390 ★
Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★