# Tenable SC SLA Triage

> An Agent Skill that analyzes a Tenable Security Center instance for remediation SLA compliance and produces a VPR-prioritized remediation queue with CISA KEV cross-referencing. Use when working with Tenable.sc vulnerability data, SLA aging, or remediation prioritization.

- Type: Skill
- Author: drmodo
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-07-26
- Source repository: https://github.com/drmodo/tenable-sc-sla-triage
- Repo state: not archived
- Last push: 2026-07-18T11:06:58Z
- Stars: 0 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Language: Python
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable
- Domains: vulnerability-management, governance-risk-compliance
- Tags: tenable, vulnerability-management, sla, vpr, kev, security-center
- Date added: 2026-07-18
- Compatible platforms: Claude Code
- Invocation: `/tenable-sc-sla-triage`
- Listing page: https://exchange.tenable.com/skills/tenable-sc-sla-triage
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/skills/tenable-sc-sla-triage.md

A read-only Agent Skill that connects to Tenable Security Center (Tenable.sc), ages open findings against remediation SLAs, and produces a risk-prioritized remediation queue.

## What it does
- Pulls cumulative (open) findings from Tenable.sc via the API
- Ages each finding from its Vulnerability Discovered date — the correct SLA clock, not "last seen"
- Prioritizes by VPR rather than static CVSS, and flags CISA KEV findings as top priority
- Outputs an executive summary, an approaching-breach watchlist, and a ranked remediation queue (CSV)

## How it works
Install the skill into your agent's skills directory and point it at a Tenable.sc instance (API access + secret keys). It queries the cumulative vulnerability database, computes SLA aging by VPR tier, cross-references the CISA Known Exploited Vulnerabilities catalog, and writes a prioritized report. Read-only by design — it never launches scans or modifies the instance. Bundles a query-syntax reference and a pyTenable script.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/skills/tenable-sc-sla-triage.json. The full index and how to read it: https://exchange.tenable.com/llms.txt