Kernel CVE Analysis
Android/AOSP kernel CVE lookups by version, branch, or date via the remote Dr. Binary vulnerability database.
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 14, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · a5ff3ec
The skill text is a clean router to six well-named remote tools, but this session had no drbinary MCP connection, so the flagship 'find exploitable CVEs in a branch+date' query could not actually be executed -- confirmed the skill only works once the full plugin (not the bare SKILL.md) registers .mcp.json against mcp.deepbits.com.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 4/5
- Triggers reliably 5/5
- Output vs. baseline 5/10
- Docs & honesty 3/5
What Kernel CVE Analysis does
Queries a remote Dr. Binary MCP server to find CVEs affecting a given AOSP kernel version, build date, or branch, and to flag which are actually exploitable (bug present and fix absent). Triggers on Android/AOSP kernel CVE questions like 'CVEs in kernel 5.10' or 'is android13-5.15 patched'; requires the bundled drbinary-chat-plugin (not just the SKILL.md) to be installed for the backing tools to exist.
How to install Kernel CVE Analysis
claude plugin marketplace add DeepBitsTechnology/claude-plugins
claude plugin install drbinary-chat-plugin
# copying only skills/kernel-cve-analysis/SKILL.md is NOT enough -- the tools
# (get_cve_info, query_cves_by_version, find_exploitable_cves, ...) are served
# by the remote MCP registered in the plugin's .mcp.json (https://mcp.deepbits.com/mcp)
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Kernel CVE Analysis
-
/kernel-cve-analysisAndroid/AOSP kernel CVE lookups by version, branch, or date via the remote Dr. Binary vulnerability database.
It also activates on plain-language prompts like these:
-
Which CVEs affect Android kernel 5.10 right now? -
Is android13-5.15 patched against known kernel exploits? -
What kernel vulnerabilities are still unpatched in android14-6.1?
Frequently asked questions
- Is the Kernel CVE Analysis skill free?
- Yes. The skill itself is free from DeepBitsTechnology/claude-plugins. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Kernel CVE Analysis work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 14, 2026. Verdict: Works with setup. The skill text is a clean router to six well-named remote tools, but this session had no drbinary MCP connection, so the flagship 'find exploitable CVEs in a branch+date' query could not actually be executed -- confirmed the skill only works once the full plugin (not the bare SKILL.md) registers .mcp.json against mcp.deepbits.com.
- What is the Kernel CVE Analysis SkillProof Score?
- 6.8/10 — installs cleanly 4/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 3/5.
- How do I install Kernel CVE Analysis?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Kernel CVE Analysis with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.