Architecture Vulnerability Mapping

knowledge skill

Maps software architecture components to known vulnerabilities using CVE databases and architectural analysis. Produces a prioritized list of vulnerabilities with affected components and risk scores.

Worked examples

• {"input": {"architecture_diagram": "{\"nodes\":[{\"id\":\"web\",\"type\":\"service\",\"tech\":\"nginx\"},{\"id\":\"db\",\"type\":\"database\",\"tech\":\"postgresql\"}],\"edges\":[{\"source\":\"web\",\"target\":\"db\"}]}", "target_technologies": ["nginx", "postgresql"], "cve_database": "NVD"}, "output": {"vulnerability_report": [{"cve_id": "CVE-2021-44228", "component": "web", "severity": "HIGH", "description": "Log4j RCE vulnerability in nginx log processing"}], "risk_summary": {"high": 1, "medium": 0, "low": 0}, "affected_components": ["web"]}}
• {"input": {"architecture_diagram": "{\"nodes\":[{\"id\":\"auth\",\"type\":\"service\",\"tech\":\"spring-boot\"}],\"edges\":[]}", "target_technologies": ["spring-boot"], "cve_database": "NVD"}, "output": {"vulnerability_report": [{"cve_id": "CVE-2022-22965", "component": "auth", "severity": "CRITICAL", "description": "Spring Framework RCE via data binding"}], "risk_summary": {"high": 0, "medium": 0, "low": 1}, "affected_components": ["auth"]}}

Input

• architecture_diagram: string
• target_technologies: array
• cve_database: string

Output

• vulnerability_report: array
• risk_summary: object
• affected_components: array

Details

• Skill type: knowledge skill
• Safety level: safe_public_research
• Version: 1.0.0