A comprehensive CPE (Common Platform Enumeration) toolkit — parsing, matching, generation, vulnerability correlation, SBOM, and 4 integration paths (SKILLS / Go SDK / CLI / MCP).
CPE is the NIST-standard naming scheme (NIST IR 7695/7696) for identifying IT systems and software — it's the backbone of CVE vulnerability matching, SBOM tracking, and supply chain security. But working with CPE is hard: two incompatible formats, complex WFN binding, multi-source vulnerability data, SBOM bridging.
cpe-skills solves all of this with a single toolkit covering the full CPE lifecycle, from parsing to vulnerability management.
Add to your Claude Code skills configuration:
https://github.com/scagogogo/cpe-skillsgo get github.com/scagogogo/cpe-skillsc, _ := cpeskills.Parse("cpe:2.3:a:microsoft:windows:10:*:*:*:*:*:*:*")
fmt.Println(c.Vendor, c.ProductName, c.Version)# Install via Go
go install github.com/scagogogo/cpe-skills/cmd/cpe@latest
# Or download a prebuilt binary from Releases (108 platforms)
cpe parse "cpe:2.3:a:microsoft:windows:10:*:*:*:*:*:*:*"
cpe match "cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:*" \
"cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:*"{
"mcpServers": {
"cpe-skills": {
"command": "cpe",
"args": ["mcp", "serve"]
}
}
}