Run a public ZEN SecDB feed report.
## What this tool does
Executes a predefined report on ZEN SecDB public feed data and returns structured results for analytics, trends, distributions, and top-N summaries.
Supported reports can cover public datasets such as:
- CVEs
- security advisories
- EPSS
- weaknesses
- CPE vendors and products
- exploit references
- sightings and IOC-related data
Use `feed_report_catalog` to discover the list of available reports and their supported input parameters.
## When to use this tool
Use this tool when the user asks about:
- distributions, trends, or counts across public vulnerability data
- top CVEs, top weaknesses, top vendors, or similar rankings
- timeline-based summaries such as yearly or monthly trends
- aggregated views over public SecDB feed data
Do not use this tool when the user asks for details about a single CVE, advisory, or exploit. Use the dedicated lookup tools instead.
## Inputs
- **report_id**: identifier of the report to execute
- **filters**: optional object with report-specific filters
- **limit**: optional maximum number of results to return, when supported by the selected report
## Outputs
- **summary**: Optional Markdown summary of the report results
- **report**: structured JSON object containing:
- `report_id`: executed report identifier
- `filters`: applied filters
- `data`: structured report rows or aggregated values
## LLM usage guidelines
- Use `feed_report_catalog` when you need to discover which public reports are available or which parameters they support.
- Do not guess report IDs-use the catalog when uncertain.
- Present `summary` directly to the user-it is already Markdown.
- Use `report` for structured follow-up analysis, comparisons, or tool chaining.
- If the selected report does not exist, return a clear not-found error instead of guessing an alternative.
Connector
