Kernel CVE Analysis

Android/AOSP kernel CVE lookups by version, branch, or date via the remote Dr. Binary vulnerability database.

Works with setup

Test report

Verdict
Works with setup
Score
6.8/10
Tested
Jul 14, 2026
Environment
Claude Code 2.x (agent harness)
Upstream re-checked
Aug 10, 2026 · a5ff3ec

The skill text is a clean router to six well-named remote tools, but this session had no drbinary MCP connection, so the flagship 'find exploitable CVEs in a branch+date' query could not actually be executed -- confirmed the skill only works once the full plugin (not the bare SKILL.md) registers .mcp.json against mcp.deepbits.com.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

  • Installs cleanly 4/5
  • Triggers reliably 5/5
  • Output vs. baseline 5/10
  • Docs & honesty 3/5

What Kernel CVE Analysis does

Queries a remote Dr. Binary MCP server to find CVEs affecting a given AOSP kernel version, build date, or branch, and to flag which are actually exploitable (bug present and fix absent). Triggers on Android/AOSP kernel CVE questions like 'CVEs in kernel 5.10' or 'is android13-5.15 patched'; requires the bundled drbinary-chat-plugin (not just the SKILL.md) to be installed for the backing tools to exist.

How to install Kernel CVE Analysis

claude plugin marketplace add DeepBitsTechnology/claude-plugins
claude plugin install drbinary-chat-plugin
# copying only skills/kernel-cve-analysis/SKILL.md is NOT enough -- the tools
# (get_cve_info, query_cves_by_version, find_exploitable_cves, ...) are served
# by the remote MCP registered in the plugin's .mcp.json (https://mcp.deepbits.com/mcp)

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Kernel CVE Analysis

  • /kernel-cve-analysis Android/AOSP kernel CVE lookups by version, branch, or date via the remote Dr. Binary vulnerability database.

It also activates on plain-language prompts like these:

  • Which CVEs affect Android kernel 5.10 right now?
  • Is android13-5.15 patched against known kernel exploits?
  • What kernel vulnerabilities are still unpatched in android14-6.1?

Frequently asked questions

Is the Kernel CVE Analysis skill free?
Yes. The skill itself is free from DeepBitsTechnology/claude-plugins. SkillProof publishes the install command and an independent test verdict at no cost.
Does Kernel CVE Analysis work with Claude Code?
We tested it with Claude Code 2.x (agent harness) on Jul 14, 2026. Verdict: Works with setup. The skill text is a clean router to six well-named remote tools, but this session had no drbinary MCP connection, so the flagship 'find exploitable CVEs in a branch+date' query could not actually be executed -- confirmed the skill only works once the full plugin (not the bare SKILL.md) registers .mcp.json against mcp.deepbits.com.
What is the Kernel CVE Analysis SkillProof Score?
6.8/10 — installs cleanly 4/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 3/5.
How do I install Kernel CVE Analysis?
Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Kernel CVE Analysis with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.