skills.rest
AppThreatAppThreatOfficial·1 Agent Skills Included

vulnerability-db

Offline vulnerability database and package search library

Builds and queries an offline SQLite vulnerability database from NVD, OSV, GitHub, and AppThreat feeds. Finds known CVEs for packages by purl, CPE, or git URL with zero network access during scans. Eliminates silent false negatives by reporting coverage gaps, stale shards, and empty databases explicitly.
145|23
↗
npx skills add AppThreat/vulnerability-db --all -g -y
Available:

Gives AI coding agents the project map, safety rules, and testing commands for modifying the vulnerability database codebase without corrupting data or breaking builds.

All Skills in This Repository (1)

Pure Emerald Level Indicators
📦 In Repo
AppThreatAppThreat

vulnerability-db

Search vulnerability databases by purl, cpe, CVE ID, and metadata.

Official
Advanced

Frequently Asked Questions

FAQPage Schema
How to install vulnerability-db?▼

Run `npx skills add AppThreat/vulnerability-db --all -g -y` in your terminal to install all skills in this suite globally.

What does vulnerability-db do?▼

It builds an offline SQLite database of CVEs from NVD, OSV, GitHub, and AppThreat feeds, then lets you search for vulnerabilities by package URL, CPE, or git URL with no network access during scans.

How do I get a vulnerability database?▼

Run `vdb db refresh full --app-only` for application dependencies or `vdb db refresh full` for app plus OS packages. Downloads are staged, validated, and swapped in atomically.

Can I use vulnerability-db without coding?▼

Yes. The `vdb` CLI handles downloads, refreshes, and searches with simple commands, and your AI agent can run them from plain-English requests.

Why does an empty scan result not mean clean?▼

An empty result can mean a missing database, an uncovered package type, or a stale shard. VDB reports coverage gaps and staleness explicitly so you never mistake a broken scan for a clean one.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills