Detect security vulnerabilities in Python/FastAPI dependencies via CVE databases.
npx skills add https://github.com/lam-TD/rag --skill dieu-tra-lo-hong
Please help me install this Agent Skill. Skill: dieu-tra-lo-hong Source: https://github.com/lam-TD/rag/tree/main Command: npx skills add https://github.com/lam-TD/rag --skill dieu-tra-lo-hong
This Skill detects potential security vulnerabilities (CVEs/advisories) affecting your Python/FastAPI project. It assists in identifying the impact of a vulnerability, proposing mitigation strategies, and writing reports. Activate it when a user provides a CVE/advisory, asks if it affects the project, or requests a security audit.
Run the 'detect_vulnerability' command with the CVE identifier for the latest release of your project.
High-intent search queries and answers about installing and using this skill.
To detect security vulnerabilities in a FastAPI project, this Skill analyzes dependencies listed in pyproject.toml or lockfiles and compares them against a CVE database to identify affected packages. It requires access to a CVE database and Python libraries for dependency analysis.
Yes, vulnerability detection works with pyproject.toml and lockfiles. The Skill parses the dependency versions defined in these files and cross-references them against known CVE entries to determine if your project is affected.
To check if a specific CVE affects your Python project, provide the CVE identifier to the detect_vulnerability command. The Skill assesses the vulnerability's impact on your dependencies and generates a report detailing the findings.
The best way to get mitigation strategies for CVEs in Python dependencies is to run a security scan using this Skill. It identifies vulnerabilities affecting your project and suggests actionable steps to mitigate each one.
Scanning Python dependencies for CVEs requires access to an external CVE database and specific Python libraries like requests and packaging. Without this access, the Skill cannot successfully retrieve vulnerability data or perform the comparison.
Yes, you can generate a security audit report for your Python project. After identifying CVEs and assessing their severity, the Skill produces detailed reports documenting the vulnerabilities and their proposed mitigation strategies.
Galaxy-DawnManage Python dependencies and virtual environments with uv.
tclemCheck and update outdated dependencies with security alerts and pull requests.
ayesha-aziz123Automates building Python APIs with FastAPI, Pydantic, and Uvicorn.
transilienceaiCoordinate CVE vulnerability testing across identified technology stacks and APIs.
