skills.rest
HillBombCreations
HillBombCreationsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

vuln

Scan, research, fix, and review software vulnerabilities using npm audit.

Updated May 12, 2026
Search Tags:#code review#security audit#npm audit#vulnerability management#security scanning
One-click install
npx skills add https://github.com/HillBombCreations/vivreal-skills --skill vuln-hillbombcreations
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln
Source: https://github.com/HillBombCreations/vivreal-skills/tree/main/vivreal-workflow/skills/vuln
Command: npx skills add https://github.com/HillBombCreations/vivreal-skills --skill vuln-hillbombcreations

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires npm audit, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the identification, research, fixing, and review of security vulnerabilities in your codebase, streamlining the process and reducing the risk of overlooked issues.

Core Features & Use Cases

  • Vulnerability Scanning: Identifies and categorizes vulnerabilities in your code.
  • Research & Fix: Investigates exploitability and proposes fixes.
  • Review: Validates fixes and ensures no new vulnerabilities are introduced.
  • Use Case: After a pull request is submitted, Vuln can be activated to scan the code, research any vulnerabilities, apply fixes, and then review the changes to ensure the code is secure.

Quick Start

Dispatch the Vuln agent to scan for vulnerabilities with the command: /vuln --phase=scan --date=2023-10-01

Frequently Asked Questions about vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate vulnerability management in my codebase after a pull request?▼

You can automate vulnerability management by dispatching a scan to identify issues, research exploitability, apply fixes, and review code changes to ensure security. This streamlines the entire code review process and reduces overlooked risks.

What is the best way to run a security audit using npm audit?▼

The best way to run a security audit is to execute a dedicated vulnerability scanning phase using npm audit to detect issues, followed by researching exploitability and applying proposed fixes to your code.

Can I use this for vulnerability scanning in any software development workflow?▼

Yes, vulnerability scanning is applicable to all software development workflows that require security audits. It integrates into your existing process to identify and categorize code vulnerabilities.

Does vulnerability management handle researching and fixing security issues or just scanning?▼

Vulnerability management handles the complete lifecycle: scanning for issues, researching exploitability, proposing and applying fixes, and reviewing the changes to ensure no new vulnerabilities are introduced.

How do I start a vulnerability scan for a specific date range?▼

You can start a vulnerability scan by dispatching the agent with the scan phase and specifying your desired date parameter, which triggers the tool to detect and categorize vulnerabilities in your code.

Why should I use an automated security audit instead of manually checking npm vulnerabilities?▼

An automated security audit streamlines the identification, research, fixing, and review of vulnerabilities, significantly reducing the risk of overlooked issues and manual effort compared to checking npm vulnerabilities by hand.

Related Skills

Explore More Software Engineering Skills→
DexploarerDexploarer
6

dependency-vulnerability-scanner

Scan dependency manifests and lockfiles for known vulnerabilities.

Community
Advanced
dreamingechoesdreamingechoes
2

code-review

Generate structured code review feedback with severity-classified findings and fixes.

Community
Advanced
rortan134rortan134
26

find-bugs-diff

Identify bugs, security vulnerabilities, and code quality issues in source code changes.

Community
Advanced
HeldinhowHeldinhow
4

security-audit

Scan dependencies and test OWASP Top 10 risks in applications.

Community
Intermediate