released should-i-care, a skill for single-CVE applicability triage. scanners tell you a product/version matches a CVE. this checks whether the CVE actually applies: deployment model, feature flags, config, distro backport status. it reasons against an environment profile it maintains for you and returns affected / not affected / needs verification, every condition cited to its source. built and tested on claude code and codex. MIT, keyless. github.com/moltenbit/should-i-care #infosec #cve #vulnerabilitymanagement #cybersecurity #security #vulnerability