skills.rest
ecosyste-ms
ecosyste-msOFFICIAL
Explore all skills by this author →
Website𝕏@ecosyste_msGitHub

advisories

Search security vulnerabilities in packages and repositories via multiple sources.

1|Updated May 5, 2026
Search Tags:#security audit#security advisories#package security#repository security#vulnerability lookup
One-click install
npx skills add https://github.com/ecosyste-ms/skills --skill advisories-ecosyste-ms
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: advisories
Source: https://github.com/ecosyste-ms/skills/tree/main/skills/advisories
Command: npx skills add https://github.com/ecosyste-ms/skills --skill advisories-ecosyste-ms

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill simplifies the process of identifying security vulnerabilities in packages and repositories, ensuring that you can stay ahead of potential risks.

Core Features & Use Cases

  • Vulnerability Lookup: Easily check for known vulnerabilities in a package or repository.
  • Advisory Listing: View recent advisories and filter them by severity, ecosystem, and other criteria.
  • Single Advisory Details: Get detailed information on a specific advisory, including its impact and mitigations.
  • Source Data: Access data from multiple security sources like GitHub Security Advisories, OSV, RustSec, and more.
  • Use Case: When auditing a package for a project, use this Skill to quickly find and evaluate security advisories that might affect the package.

Quick Start

Query the security advisories for the package 'lodash' on PyPI.

Frequently Asked Questions about advisories

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a package for known security vulnerabilities?▼

To check a package for security vulnerabilities, you can perform a vulnerability lookup using the package name and ecosystem, such as PyPI, to retrieve relevant advisories and detailed impact information.

Can I filter security advisories by severity and ecosystem?▼

Yes, you can view recent security advisories and filter the listing by severity, ecosystem, and other criteria to quickly identify relevant risks during a security audit or compliance check.

What sources are used for repository security and vulnerability lookup?▼

Vulnerability lookup and advisory data are aggregated from multiple security sources, including GitHub Security Advisories, OSV, and RustSec, providing comprehensive coverage for package security audits.

How do I get detailed information on a specific security advisory?▼

You can retrieve single advisory details by querying its specific identifier, which returns comprehensive information on the security vulnerability, including its potential impact and available mitigations.

What is the best way to audit dependencies for security risks before a release?▼

The best way to audit dependencies is to run a vulnerability lookup on your packages to identify known security risks, evaluate advisory details, and apply mitigations before project release.

Does this vulnerability lookup tool work with Python packages on PyPI?▼

Yes, the vulnerability lookup tool works with Python packages on PyPI, allowing you to query security advisories for specific packages to ensure repository security and compliance.

Related Skills

Explore More Software Engineering Skills→
ArabelaTsoArabelaTso
142

time-aware-dependency-cve-scanner

Scan repository dependencies for CVEs disclosed after a specified cutoff date.

Community
Intermediate
sjinkssjinks

security-review-owasp-vulnerable-dependency-management

Assess vulnerable dependency management workflows and remediation controls.

Community
Advanced
randalmurphalrandalmurphal

python-packaging

Manage Python dependencies and resolve version conflicts across Poetry, Pip, and uv workflows.

Community
Advanced
x-cmdx-cmd
4.6k

x-osv

Query OSV database for package vulnerabilities and scan local projects.

Official
Intermediate