advisories

Search security vulnerabilities in packages and repositories via multiple sources.

1|Updated May 5, 2026

Search Tags:#security audit #security advisories #package security #repository security #vulnerability lookup

Ready to run

npx skills add https://github.com/ecosyste-ms/skills --skill advisories-ecosyste-ms

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: advisories
Source: https://github.com/ecosyste-ms/skills/tree/main/skills/advisories
Command: npx skills add https://github.com/ecosyste-ms/skills --skill advisories-ecosyste-ms

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill simplifies the process of identifying security vulnerabilities in packages and repositories, ensuring that you can stay ahead of potential risks.

Core Features & Use Cases

Vulnerability Lookup: Easily check for known vulnerabilities in a package or repository.
Advisory Listing: View recent advisories and filter them by severity, ecosystem, and other criteria.
Single Advisory Details: Get detailed information on a specific advisory, including its impact and mitigations.
Source Data: Access data from multiple security sources like GitHub Security Advisories, OSV, RustSec, and more.
Use Case: When auditing a package for a project, use this Skill to quickly find and evaluate security advisories that might affect the package.

Quick Start

Query the security advisories for the package 'lodash' on PyPI.

Frequently Asked Questions about advisories

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check a package for known security vulnerabilities?▼

To check a package for security vulnerabilities, you can perform a vulnerability lookup using the package name and ecosystem, such as PyPI, to retrieve relevant advisories and detailed impact information.

Can I filter security advisories by severity and ecosystem?▼

Yes, you can view recent security advisories and filter the listing by severity, ecosystem, and other criteria to quickly identify relevant risks during a security audit or compliance check.

What sources are used for repository security and vulnerability lookup?▼

Vulnerability lookup and advisory data are aggregated from multiple security sources, including GitHub Security Advisories, OSV, and RustSec, providing comprehensive coverage for package security audits.

How do I get detailed information on a specific security advisory?▼

You can retrieve single advisory details by querying its specific identifier, which returns comprehensive information on the security vulnerability, including its potential impact and available mitigations.

What is the best way to audit dependencies for security risks before a release?▼

The best way to audit dependencies is to run a vulnerability lookup on your packages to identify known security risks, evaluate advisory details, and apply mitigations before project release.

Does this vulnerability lookup tool work with Python packages on PyPI?▼

Yes, the vulnerability lookup tool works with Python packages on PyPI, allowing you to query security advisories for specific packages to ensure repository security and compliance.