plan_remediation
Prioritize patches, track deployment status, and verify mitigation coverage for CVEs or QIDs. Identify program gaps to reduce risk.
Instructions
[Remediation] Remediation planning — patch priorities, deployment status, mitigation coverage, program gaps. @slow
USE WHEN: "what should we patch?", "outstanding patches", "patch deployment status", "mitigation coverage", "is there a mitigation for CVE-X?", "what's missing from our security program?", "how do we reduce risk?"
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tag | No | filter by tag | |
| cves | No | check mitigation coverage for specific CVEs (list of strings) | |
| qids | No | check mitigation coverage for specific QIDs (list of ints) | |
| limit | No | max results (default 20) | |
| scope | No | "all" | "patches" | "mitigations" | "program" | all |
| detail | No | "summary" | "standard" | "detailed" | standard |
| status | No | patch job status filter | |
| platform | No | "windows" | "linux" | |
| severity | No | "critical" | "high" | "moderate" | |
| asset_group | No | filter by asset group |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |