A specialized MCP server providing real-time, multi-source vulnerability intelligence from NIST, CISA, and MITRE without requiring API keys.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install gov-cybersecurity
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install gov-cybersecurity using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Government Cybersecurity Vulnerability Intel?
The Government Cybersecurity Vulnerability Intel skill is a technical powerhouse designed to bring authoritative security data directly into your AI development workflow. By integrating this into Openclaw Skills, developers and security researchers gain access to real-time insights from four critical sources: NIST National Vulnerability Database (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST.org EPSS scores, and MITRE ATT&CK mappings. This skill eliminates the friction of manual vulnerability lookups, providing a unified interface for identifying, scoring, and prioritizing security threats.
Built for speed and transparency, the skill requires zero API keys and leverages free US government APIs. It provides a robust set of tools for performing deep CVE lookups, searching by vendor, and tracking active exploitation trends, making it an essential component for any modern security-focused AI agent configuration.
Government Cybersecurity Vulnerability Intel Use Cases
- Perform rapid vulnerability triage and prioritization using CVSS and EPSS metrics.
- Monitor and track CISA KEV remediation deadlines for organizational compliance.
- Execute comprehensive vendor risk assessments by searching product-specific CVE histories.
- Generate real-time threat intelligence briefings and security reports directly within your workspace.
- Support patch management decisions by identifying vulnerabilities with high exploitation probability.
How Government Cybersecurity Vulnerability Intel Works
- The skill connects to a remote MCP server via a streamable-http transport layer.
- When a query is made, the skill triggers one of seven specialized tools to fetch data from authoritative government APIs.
- The skill aggregates intelligence from NVD, CISA, and EPSS to create a holistic view of a vulnerability's impact and risk.
- Data is processed to cross-reference CVEs with specific MITRE ATT&CK techniques where applicable.
- The enriched security intelligence is returned to the user or agent, enabling informed decision-making based on live cybersecurity data.
Government Cybersecurity Vulnerability Intel Setup
To add this capability to your Openclaw Skills environment, use the mcporter CLI:
mcporter add gov-cyber --url https://cybersecurity-vuln-mcp.apify.actor/mcp --transport streamable-http
For manual configuration, update your ~/.openclaw/mcp.json file:
{
"servers": {
"gov-cyber": {
"url": "https://cybersecurity-vuln-mcp.apify.actor/mcp",
"transport": "streamable-http"
}
}
}
Government Cybersecurity Vulnerability Intel Data Schema & Taxonomy
The skill organizes vulnerability data using a structured taxonomy across four primary domains:
| Domain | Metadata Provided |
|---|---|
| NIST NVD | CVSS severity scores (v2.0, v3.x), detailed descriptions, and publication timelines. |
| CISA KEV | Active exploitation status, federal remediation deadlines, and required actions. |
| FIRST.org EPSS | Daily updated probability scores representing the likelihood of exploitation in the wild. |
| MITRE ATT&CK | Mappings to adversary tactics and techniques for behavioral context. |
Government Cybersecurity Vulnerability Intel Advanced Features
- Enriched single-call intelligence that combines four data sources for any given CVE ID.
- Proactive monitoring of trending critical and high-severity vulnerabilities from the last 30 days.
- Advanced EPSS threshold filtering to identify threats with a high probability of imminent exploitation.
- Vendor-specific searching with built-in CISA KEV cross-referencing for targeted risk analysis.
- Seamless integration with other Openclaw Skills for automated security auditing and incident response workflows.
SKILL.md
Loading
Related Openclaw Skills
US Court Records Search
A specialized tool for searching US federal court opinions, dockets, and judicial records directly within your AI workflow.
Government Contracts
A comprehensive toolset for searching SAM.gov contract opportunities, federal spending awards, and registered government entities.
Government Competitive Intelligence
A specialized research toolset for aggregating SEC filings, real-time news, and federal contract data into comprehensive competitive profiles.
Business Entity Search
A high-performance toolset for searching global company registrations via OpenCorporates and US public filings via SEC EDGAR.
Natural Disaster Intel
A real-time monitoring suite providing direct access to official FEMA, NOAA, and USGS disaster data for AI agents.
Environmental & Housing Intel
A powerful integration for monitoring US air quality indices and searching government foreclosure listings without requiring API keys.
Featured*
