vulnerability-advisory-impact-brief

vulnerability-advisory-impact-brief Business Diagnostic Assistant

Quick Start

More Skills

Overview

The Business Diagnostic Assistant is used to answer "how should this be done," vulnerability advisories, security operations, and impact assessments. It is suitable for technical staff, managers, software professionals, and vulnerability advisories after clarifying business goals, content materials, or analysis targets. It combines inputs such as vulnerability advisory content, pasted vulnerability advisories, CVE summaries, affected versions, remediation recommendations, and vendor statements, organizes key context, and outputs summaries, diagnostic conclusions, action recommendations, and reusable deliverables for further execution, review, or delivery.

When to Use

Applicable Scenarios

• The user raises questions such as "how should this be done," requiring rapid decomposition of goals, identification of priorities, and formation of executable results
• Technical staff, managers, software professionals, and vulnerability advisories need to generate summaries, diagnostic conclusions, action recommendations, and reusable deliverables around the Business Diagnostic Assistant
• The user has already prepared briefing priorities (select the direction that most needs priority handling in this vulnerability advisory impact brief), vulnerability advisory content (paste vulnerability advisories, CVE summaries, affected versions, remediation recommendations, and vendor statements), and uploaded advisory materials (upload vulnerability advisories, asset inventories, version tables, remediation plans, or risk registers), and wants to organize them into executable analysis or optimization results
• The user needs to turn materials related to the Business Diagnostic Assistant into clear conclusions, priorities, and next-step actions

How to Invoke

Invoke the AI Skills API directly through the exported Python runner:

Command Examples

Basic Invocation

python3 scripts/run.py --params '{}'

Invocation with Common Parameters

python3 scripts/run.py --params '{"impactBriefFocus":"影响范围"}'

Parameter Description

Parameter	Type	Required	Default	Description
impactBriefFocus	string	No	影响范围	Select the direction that most needs priority handling in this vulnerability advisory impact brief; optional values:影响范围、处置优先级、缓解计划、沟通摘要
vulnAdvisoryText	string	No	-	Paste vulnerability advisories, CVE summaries, affected versions, remediation recommendations, and vendor statements
vulnBulletinFile	string	No	-	Upload vulnerability advisories, asset inventories, version tables, remediation plans, or risk registers
productExposureLink	string	No	-	Fill in publicly accessible vendor advisories, CVE pages, product documentation, or release notes; a complete accessible URL is required
affectedAssetContext	string	No	-	Describe product version, deployment environment, exposure surface, business criticality, and current protective measures
mitigationStatusNotes	string	No	-	Supplement patch availability, temporary mitigations, maintenance windows, owners, and assets pending verification

See the complete machine-readable parameter structure at references/form-schema.json。

Parameter Value Reference

The current skill has no categorical parameters that require additional lookup.

Supported Input Formats

The current skill directly accepts JSON parameters; if a parameter contains a link field, please provide a complete, accessible URL.

Example Request

The example parameters below can be passed directly to scripts/run.py, and the runner will send them to the AI Skills API.

python3 scripts/run.py --params '{"impactBriefFocus":"影响范围"}'

Equivalent --params JSON：

{
  "impactBriefFocus": "影响范围"
}

Example return result

{
  "success": true,
  "data": {
    "message": "示例结果请以技能真实返回结构为准。"
  },
  "meta": {
    "executionTime": 842,
    "cached": false
  }
}

Deliverables

• Summary, diagnostic conclusions, action recommendations, and reusable deliverables: organize the core results around the user's goals that can be directly read, reviewed, or delivered.
• Interpretation of input materials: extract key context and judgment basis by combining the briefing focus (choose the direction in this vulnerability announcement impact briefing that most needs priority handling.), vulnerability announcement content (paste the vulnerability announcement, CVE summary, affected versions, remediation recommendations, and vendor notes.), and uploaded announcement materials (upload the vulnerability announcement, asset inventory, version table, remediation plan, or risk register.).
• Next steps: provide priorities, execution recommendations, or a content framework that can be further processed.

Suggestions for using the results

• First determine whether the output answers the user's core question about the "Business Diagnostic Assistant".
• Then check whether the results cover the summary, diagnostic conclusions, action recommendations, and reusable deliverables, and whether clear next steps are provided.
• If there is little input material, it is recommended to have the user supplement the goals, audience, constraints, or original materials before running.

Preparation before running

• AISKILLS_BASE_URL: default https://ai-skills.ai
• AISKILLS_API_KEY: required, used for authenticated calls
• AISKILLS_TENANT_ID: default default