cve

Scan project dependencies, source code, and documentation for known CVEs.

292|103|Updated Mar 27, 2025
One-click install
npx skills add https://github.com/kagenti/kagenti --skill cve-kagenti
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cve
Source: https://github.com/kagenti/kagenti/tree/main/.claude/skills/cve
Command: npx skills add https://github.com/kagenti/kagenti --skill cve-kagenti

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps manage security vulnerabilities (CVEs) within project dependencies, source code, and documentation, preventing accidental leaks and ensuring responsible disclosure.

Core Features & Use Cases

  • Dependency Scanning: Detects known CVEs in project dependencies across various manifest files (e.g., pyproject.toml, package.json, go.mod, Dockerfiles, Helm charts).
  • Code Security Review: Analyzes source code for common security flaws like authentication issues, injection vulnerabilities, and secrets exposure.
  • Documentation Audit: Scans Markdown files to prevent accidental disclosure of CVE IDs or vulnerability details.
  • Disclosure Planning: Assists in planning the responsible disclosure process for identified vulnerabilities.
  • Use Case: Before merging a new feature branch, this skill automatically scans all new dependencies and code changes for potential CVEs. If any are found, it flags them and initiates a planning process for disclosure, preventing the code from being pushed publicly until the vulnerability is handled.

Quick Start

Scan the current project for any security vulnerabilities and documentation leaks.

Frequently Asked Questions about cve

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan project dependencies for known CVEs before merging a feature branch?

To scan project dependencies for known CVEs, this Skill analyzes manifest files like pyproject.toml, package.json, go.mod, Dockerfiles, and Helm charts. It flags identified vulnerabilities and prevents code from being pushed publicly until properly handled.

How can I prevent accidental vulnerability disclosure in markdown documentation?

To prevent accidental vulnerability disclosure in markdown documentation, this Skill performs a documentation audit that scans files for CVE IDs or vulnerability details. It detects potential leaks before publication to ensure sensitive security information remains private.

Can I integrate security vulnerability scanning into CI/CD pipelines and pre-commit hooks?

Yes, you can integrate security vulnerability scanning into CI/CD pipelines and pre-commit hooks to enforce security gates. This Skill automatically evaluates new dependencies and code changes during the merge process to block public exposure of unresolved risks.

What is the best way to plan responsible disclosure for identified code security flaws?

The best way to plan responsible disclosure for identified code security flaws is to use a Skill that initiates a planning process after detection. It assists in structuring the disclosure timeline and communication strategy once vulnerabilities are found during source code analysis.

Does code security review detect authentication issues and injection vulnerabilities in source code?

Yes, code security review detects authentication issues, injection vulnerabilities, and secrets exposure in source code. This Skill analyzes your project's source files to proactively identify common security flaws alongside scanning dependencies for known CVEs.