Parse dependency files and report known CVEs with severity scores.
npx skills add https://github.com/Mearman/marketplace --skill cve-audit
Please help me install this Agent Skill. Skill: cve-audit Source: https://github.com/Mearman/marketplace/tree/main/plugins/cve-search/skills/cve-audit Command: npx skills add https://github.com/Mearman/marketplace --skill cve-audit
Automatically detects and reports known CVEs affecting a project's dependencies by parsing common dependency files and querying CVE databases.
Scan the current project directory to enumerate dependencies and fetch CVE results.
High-intent search queries and answers about installing and using this skill.
To audit project dependencies for known CVEs, the tool automatically parses dependency files across Node.js, Python, Ruby, Go, and Java Maven projects, querying CVE databases to report vulnerability findings with severity and scores.
Generating a compliance report for dependency vulnerabilities involves scanning dependency files and querying CVE databases to produce both human-readable reports and machine-readable JSON outputs containing severity scores and vulnerability summaries.
To check Node.js or Python projects for security vulnerabilities, the tool discovers and parses common dependency files, extracts versions, and queries CVE databases to identify known vulnerabilities with detailed severity findings.
Yes, you can bypass the cache to fetch the latest CVE database results during an audit, ensuring your dependency vulnerability findings reflect the most current security data available.
Yes, the dependency vulnerability scanner works with Go and Java Maven projects, automatically discovering and parsing their specific dependency files to query CVE databases and report security findings.
The CVE findings for a security review include the vulnerability severity, score, and summaries, which are parsed from queried CVE databases based on the exact dependency versions found in your project files.
imMamdouhaboammarDetect project types and apply safe dependency updates across multiple languages.
DonTiziScan codebases for secrets, OWASP risks, and vulnerable dependencies.
kirvinAnalyze code for OWASP Top 10 vulnerabilities, secrets, and dependency CVEs.
zapabobMonitor file system changes and trigger quality analysis in real-time.
