CISO Security KitAppSecAI CISO
Vulnerable & Outdated Components
OWASP Top 10 A06 — dependency inventory, CVE scan, lifecycle review for third-party components.
What this skill does
Vulnerable & Outdated Components is a versioned playbook inside the CISO Security Kit. It runs on the AI CISO agent through the Procux skill runtime, producing structured, auditable output suitable for executive review and regulator submission.
- Kit
- CISO Security Kit
- Category
- AppSec
- Primary agent(s)
- AI CISO
- Tags
- owasp, appsec, dependencies, cve, sbom
How to use it
- Sign in to your Procux workspace and open the platform dashboard.
- Pick the AI CISO agent, then pick Vulnerable & Outdated Components from the CISO Security Kit catalog.
- Provide the required inputs (repo, document, endpoint, jurisdiction) — the agent runs the playbook and returns a structured report.
- Review, iterate, or export (PDF / JSON / Markdown) as part of your internal review cycle.
Related skills
- Authentication & Session FailuresOWASP Top 10 A07 — review authentication and session management flaws: broken logout, session fixation, weak credentials, MFA bypass.
- Broken Access ControlOWASP Top 10 A01 — review authorization flaws (BOLA, IDOR, privilege escalation, missing role checks).
- Cryptographic FailuresOWASP Top 10 A02 — audit cryptography usage: weak algorithms, key management, TLS config, at-rest / in-transit encryption gaps.