aeon-vuln-scanner

To scan a GitHub repository for security vulnerabilities, provide the repository owner and name as inputs. The Skill audits the code using Semgrep, TruffleHog, osv-scanner, and Slither to identify exploitable vulnerabilities and triage findings automatically.

Automated vulnerability disclosure works by routing triaged security findings to the appropriate disclosure channel based on vulnerability type. After scanning a GitHub repository, the Skill generates a responsible disclosure report for the identified issues.

Yes, you need GitHub API access to audit trending repositories for vulnerabilities. The Skill requires GitHub API access to fetch repository details and security advisories during the automated security auditing process.

Yes, you can use Semgrep and Slither together for automated code auditing. The Skill integrates both tools along with TruffleHog and osv-scanner to perform comprehensive vulnerability identification across trending GitHub repositories.

The best way to responsibly disclose vulnerabilities found in open source code is to automate the routing of triaged findings to appropriate channels. This Skill handles the entire disclosure pathway after identifying exploitable vulnerabilities in GitHub repositories.