# CVE Impact Analyzer

> Determines whether a CVE affects an environment using existing software inventory data from prior scans — no new scan required.

- Type: Skill
- Author: bking34
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-07-16
- Source repository: https://github.com/bking34/cve-impact-analyzer
- Repo state: not archived
- Last push: 2026-07-22T19:52:19Z
- Stars: 2 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: NVD, Tenable, Tenable Hexa AI MCP
- Domains: vulnerability-management
- Tags: cve, vulnerability-management, tenable, software-inventory, exposure-analysis
- Date added: 2026-07-16
- Works with the Tenable Hexa AI MCP server: yes
- Compatible platforms: Claude Code
- Invocation: `natural language — triggers on 'are we vulnerable to CVE-...', 'which assets are affected by...', 'do we have [software] installed'`
- Listing page: https://exchange.tenable.com/skills/cve-impact-analyzer
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/skills/cve-impact-analyzer.md

A Claude Code skill that determines CVE exposure across your environment using existing Tenable scan data — no new scan required.

## What it does

Given a CVE ID, this skill looks up the affected software and version range, searches your Tenable software inventory from prior credentialed scans, compares installed versions against the vulnerable range, and produces a structured impact assessment with per-asset exposure status — confirmed vulnerable, likely vulnerable, patched, or not detected.

## How it works

The skill queries the Tenable Hexa MCP to search software inventory built from prior credentialed scans (via enumeration plugins 20811, 22869, 12634, 97993, 83991, 152741). It matches installed software versions against the CVE's affected range, cross-references any existing Tenable detection plugin findings, and outputs a prioritized asset list with confidence assessment and recommended next steps.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/skills/cve-impact-analyzer.json. The full index and how to read it: https://exchange.tenable.com/llms.txt