exploits-search

Search vulnerabilities using ecosystem, severity, source, and EPSS filters.

9|1|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/Vulnetix/pix-ai-coding-assistant --skill exploits-search
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: exploits-search
Source: https://github.com/Vulnetix/pix-ai-coding-assistant/tree/main/vulnetix/skills/exploits-search
Command: npx skills add https://github.com/Vulnetix/pix-ai-coding-assistant --skill exploits-search

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Surface exploit opportunities across vulnerabilities by applying filters for ecosystem, severity, source, and EPSS, enabling proactive risk assessment for security-conscious development teams.

Core Features & Use Cases

  • Surface exploitable CVEs relevant to your repository across ecosystems using filtered search.
  • Filter results by ecosystem, severity, exploit source, and EPSS score to tailor findings to project needs.
  • Use with /vulnetix:exploits for deep analysis or /vulnetix:remediation for remediation planning.

Quick Start

Run a query to begin an exploit search across vulnerabilities using the available filters.

Frequently Asked Questions about exploits-search

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I search for exploits across vulnerabilities in my repository's dependencies?

To search for exploits across vulnerabilities, apply filters for ecosystem, severity, exploit source, and EPSS score. This surfaces exploitable CVEs specifically relevant to your project's tech stack and dependencies.

What does EPSS filtering do when discovering exploit opportunities?

EPSS filtering ranks exploit opportunities by predicting the likelihood of vulnerability exploitation in the wild. This allows teams to prioritize proactive risk assessment based on actual threat probability rather than just severity.

Can I filter exploitable CVEs by ecosystem and severity for my tech stack?

Yes, you can filter exploitable CVEs by ecosystem and severity. This tailors vulnerability findings to your specific project needs, ensuring the discovered exploits directly map to your repository's tech stack.

How does vulnerability discovery cross-reference prior scan memory?

Vulnerability discovery cross-references scans by reading prior memory state from .vulnetix/memory.yaml. It updates memory by creating stub entries with status under_investigation and appending findings to the history.

What is the best way to plan remediation after finding exploited vulnerabilities?

The best way to plan remediation after finding exploited vulnerabilities is to use the results for deep analysis. You can proceed to targeted remediation planning to address the surfaced exploit opportunities.

Are there limitations to using automated exploit discovery for proactive risk assessment?

Automated exploit discovery relies on existing memory state and cross-referenced scans, meaning it may create stub entries marked under_investigation rather than providing immediate, fully verified exploit confirmations.