dieu-tra-lo-hong

Detect security vulnerabilities in Python/FastAPI dependencies via CVE databases.

Updated Nov 1, 2025

Search Tags:#dependency analysis #FastAPI #CVE #security scanning #vulnerability detection

Ready to run

npx skills add https://github.com/lam-TD/rag --skill dieu-tra-lo-hong

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dieu-tra-lo-hong
Source: https://github.com/lam-TD/rag/tree/main
Command: npx skills add https://github.com/lam-TD/rag --skill dieu-tra-lo-hong

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, requests-cache, packaging, requests_html, and includes scripts (resource) components.

What problem does it solve?

This Skill detects potential security vulnerabilities (CVEs/advisories) affecting your Python/FastAPI project. It assists in identifying the impact of a vulnerability, proposing mitigation strategies, and writing reports. Activate it when a user provides a CVE/advisory, asks if it affects the project, or requests a security audit.

Core Features & Use Cases

Vulnerability Identification: Identifies CVEs affecting the project's dependencies.
Impact Assessment: Determines the potential impact of each vulnerability.
Mitigation Strategy: Suggests steps to mitigate identified vulnerabilities.
Reporting: Generates detailed reports on vulnerabilities.

Quick Start

Run the 'detect_vulnerability' command with the CVE identifier for the latest release of your project.

Frequently Asked Questions about dieu-tra-lo-hong

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect security vulnerabilities in my FastAPI project dependencies?▼

To detect security vulnerabilities in a FastAPI project, this Skill analyzes dependencies listed in pyproject.toml or lockfiles and compares them against a CVE database to identify affected packages. It requires access to a CVE database and Python libraries for dependency analysis.

Does vulnerability detection work with pyproject.toml lockfiles?▼

Yes, vulnerability detection works with pyproject.toml and lockfiles. The Skill parses the dependency versions defined in these files and cross-references them against known CVE entries to determine if your project is affected.

How do I check if a specific CVE affects my Python project?▼

To check if a specific CVE affects your Python project, provide the CVE identifier to the detect_vulnerability command. The Skill assesses the vulnerability's impact on your dependencies and generates a report detailing the findings.

What is the best way to get mitigation strategies for CVEs found in Python dependencies?▼

The best way to get mitigation strategies for CVEs in Python dependencies is to run a security scan using this Skill. It identifies vulnerabilities affecting your project and suggests actionable steps to mitigate each one.

What limitations exist when scanning Python dependencies for CVEs?▼

Scanning Python dependencies for CVEs requires access to an external CVE database and specific Python libraries like requests and packaging. Without this access, the Skill cannot successfully retrieve vulnerability data or perform the comparison.

Can I generate a security audit report for my Python project's vulnerable dependencies?▼

Yes, you can generate a security audit report for your Python project. After identifying CVEs and assessing their severity, the Skill produces detailed reports documenting the vulnerabilities and their proposed mitigation strategies.