orbit-cve-check

Detect WordPress plugin vulnerabilities by cross-referencing live CVE feeds.

2|1|Updated Apr 20, 2026
One-click install
npx skills add https://github.com/adityaarsharma/orbit --skill orbit-cve-check
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: orbit-cve-check
Source: https://github.com/adityaarsharma/orbit/tree/main/skills/orbit-cve-check
Command: npx skills add https://github.com/adityaarsharma/orbit --skill orbit-cve-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, regex, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides real-time CVE (Common Vulnerabilities and Exposures) checks to ensure that plugins remain secure and free from known vulnerabilities.

Core Features & Use Cases

  • Live CVE Feed Correlation: Fetches NVD, Patchstack, and WPScan feeds at runtime, keeping security checks current.
  • Plugin Ownership-Transfer Detection: Identifies unauthorized changes to plugin ownership.
  • Use Case: When performing regular security audits on WordPress plugins or upon receiving a report of a potential vulnerability.

Quick Start

To perform a live CVE check on your plugin, use the command: /orbit-cve-check

Frequently Asked Questions about orbit-cve-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a WordPress plugin for live CVE vulnerabilities?

To check a WordPress plugin for live CVE vulnerabilities, the Skill fetches NVD, Patchstack, and WPScan feeds in real-time and cross-references them against your plugin source code using regex analysis to detect known threats.

What is CVE feed correlation and how does it secure WordPress plugins?

CVE feed correlation secures WordPress plugins by fetching runtime vulnerability feeds from NVD, Patchstack, and WPScan, then cross-referencing the data against plugin source code to detect and report active security exposures.

Can I detect unauthorized WordPress plugin ownership transfers using regex?

Yes, you can detect unauthorized changes to plugin ownership by running this Skill, which uses regex analysis alongside live CVE feeds to identify suspicious modifications in WordPress plugin source code.

Does this CVE check work with real-time Patchstack and WPScan feeds?

Yes, this CVE check operates in real-time by fetching live Patchstack and WPScan feeds, ensuring your WordPress plugin security audits always consider the most recently reported vulnerabilities.

When should I perform a live CVE check on my WordPress plugins?

You should perform a live CVE check during regular security audits on WordPress plugins or immediately upon receiving a report of a potential vulnerability to ensure source code is free from known exposures.