SkillsAdd

microsoft/promptkit · Archived

ingest-cwe-taxonomies

Ingest the official MITRE CWE database and generate per-domain security audit taxonomies for PromptKit. Use this skill when the user wants to update CWE taxonomies, ingest a new CWE version, or regenerate domain mappings from the CWE corpus.

First seen Jul 10, 2026

Installation

$ npx skills add microsoft/promptkit --skill ingest-cwe-taxonomies
View on skills.sh ↗ GitHub repository ↗

Stronger alternatives

This repository is archived — consider an actively maintained alternative.

boot Same source · more installs
microsoft/promptkit

Shorthand alias for the /promptkit skill. Use this when the user wants to assemble a task-speci…

5 installs
respond-to-pr-comments Same source
microsoft/promptkit

Respond to pull request review comments on GitHub or Azure DevOps Services. Reads review thread…

2 installs
promptkit Same source
microsoft/promptkit

PromptKit composition engine. Use this skill when the user wants to assemble a task-specific pr…

2 installs
bootstrap Same source
microsoft/promptkit

Alias for the /promptkit skill. Use this when the user wants to assemble a task-specific prompt…

2 installs

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

microsoft-foundry Same topic
microsoft/azure-skills

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and …

576.5K installs
azure-diagnostics Same topic
microsoft/azure-skills

Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe …

568.9K installs
azure-prepare Same topic
microsoft/azure-skills

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Te…

568.3K installs
azure-ai Same topic
microsoft/azure-skills

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybr…

568.2K installs
azure-deploy Same topic
microsoft/azure-skills

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deploymen…

568.2K installs
azure-validate Same topic
microsoft/azure-skills

Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure…

567.7K installs

Also in this package

Other skills from microsoft/promptkit.

npx skills add microsoft/promptkit
boot 5 respond-to-pr-comments 2 promptkit 2 bootstrap 2

Browse all from microsoft/promptkit

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 96
License LICENSE
Default branch main
Open issues 13
Status Archived

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,426 B
  • docs SUMMARY.md 270 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 2 installs

SKILL.md

<!-- Generated by PromptKit — edit with care -->

You must read and execute the prompt file at .github/prompts/ingest-cwe-taxonomies.prompt.md. Treat it as the complete, self-contained instruction set for the CWE ingestion pipeline.

Inputs

  • CWE source: A local path to a CWE XML file, or latest to download

the current release from https://cwe.mitre.org/data/xml/cwec_latest.xml.zip.

  • Any overrides to the domain registry or mapping rules the user specifies.

Output

  • Per-domain taxonomy files at taxonomies/cwe-<domain>.md (13 domains)
  • Normalized CWE data at data/cwe/<version>/
  • Updated manifest.yaml with new taxonomy entries
  • Reusable ingestion script at scripts/ingest-cwe.py
  • Diff report if a previous CWE version exists

Workflow

  1. Read .github/prompts/ingest-cwe-taxonomies.prompt.md before doing

anything else.

  1. Ask the user for the CWE source (path or latest).
  2. Follow all six phases defined in the prompt file: Acquisition,

Normalization, Domain Mapping, Taxonomy Generation, Integration, and Verification.

  1. Do NOT skip the sanity checks in Phase 6.