skills.rest
Eskyee
EskyeeCOMMUNITY
Explore all skills by this author →
Website𝕏@Esky33junglistGitHub

aeon-vuln-scanner

Scan code repositories for known vulnerabilities and integrate with GitHub private vulnerability reporting.

14|2|Updated Mar 19, 2026
Search Tags:#GitHub#code security#vulnerability management#vulnerability scanning#responsible disclosure
One-click install
npx skills add https://github.com/Eskyee/agentbot-opensource --skill aeon-vuln-scanner-eskyee
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aeon-vuln-scanner
Source: https://github.com/Eskyee/agentbot-opensource/tree/main/skills/aeon-vuln-scanner
Command: npx skills add https://github.com/Eskyee/agentbot-opensource --skill aeon-vuln-scanner-eskyee

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automatically scans trending repositories for exploitable vulnerabilities and discloses them responsibly.

Core Features & Use Cases

  • Vulnerability Scanning: Identifies real exploitable vulnerabilities in code.
  • Responsible Disclosure: Publishes findings only for disclosed CVEs or as private advisories.
  • Multi-Scanner Integration: Combines Semgrep, TruffleHog, osv-scanner, and Slither for comprehensive analysis.
  • Code Triage: Routes findings to the appropriate disclosure channel based on their severity and context.

Quick Start

Trigger a scan for vulnerabilities in a specified repository with the command: scan vulnerabilities owner/repo

Frequently Asked Questions about aeon-vuln-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan trending GitHub repositories for known vulnerabilities?▼

To scan trending GitHub repositories for known vulnerabilities, trigger a scan using the command `scan vulnerabilities owner/repo`. The Skill targets active repositories and analyzes code for exploitable flaws.

Can I scan code written in Python, Rust, and Solidity for security issues?▼

Yes, you can scan code written in Python, Rust, Solidity, JavaScript, and Go for security issues. The Skill targets trending repositories with high activity across these specific programming languages.

How does responsible disclosure work for vulnerabilities found in GitHub repositories?▼

Responsible disclosure works by routing findings to GitHub's private vulnerability reporting system. The Skill publishes findings only for disclosed CVEs or as private advisories to ensure secure code triage.

What's the best way to combine multiple scanners like Semgrep and osv-scanner for code triage?▼

The best way to combine multiple scanners for code triage is using a multi-scanner integration approach. This Skill combines Semgrep, TruffleHog, osv-scanner, and Slither to provide comprehensive vulnerability analysis.

Does this vulnerability scanning tool publish findings for undisclosed CVEs?▼

No, this vulnerability scanning tool does not publish findings for undisclosed CVEs. It strictly adheres to responsible disclosure by publishing only known CVEs or submitting private advisories through GitHub.

Related Skills

Explore More Software Engineering Skills→
mlvpatelmlvpatel
1

code-reaper

Identify and remediate security weaknesses in source code via static analysis.

Community
Advanced
thetangstrthetangstr

deal-with-security-advisory

Coordinate private fixes, CVE requests, and publication for GitHub security advisories.

Community
Advanced
Atrium-HermesAtrium-Hermes

Vuln Scanner

Identify real security vulnerabilities in trending repositories and route disclosures.

Community
Advanced
Srujan0798Srujan0798

security-auditor

Detect OWASP Top 10 vulnerabilities in code changes with structured alerts.

Community
Intermediate