Vuln Scanner

Scan GitHub repositories for security vulnerabilities and automate responsible disclosure.

Updated Jul 16, 2026

Search Tags:#security #GitHub #vulnerability management #vulnerability scanning #responsible disclosure #private vulnerability reporting

Ready to run

npx skills add https://github.com/enuno/noesis-aeon --skill vuln-scanner-enuno

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Vuln Scanner
Source: https://github.com/enuno/noesis-aeon/tree/main/skills/vuln-scanner
Command: npx skills add https://github.com/enuno/noesis-aeon --skill vuln-scanner-enuno

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires github-trending, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of scanning GitHub repositories for security vulnerabilities and facilitating responsible disclosure through private and public channels.

Core Features & Use Cases

Vulnerability Scanning: Audit trending repositories for security vulnerabilities using a combination of static analysis tools.
Responsible Disclosure: Facilitate private vulnerability reporting (PVR) and public patching via GitHub PRs.
Automated Re-Submission: Re-submit queued advisories for repositories that have enabled private vulnerability reporting.
Email Disclosure: Send armed email disclosures for private vulnerability disclosures.
Use Case: A developer can use this Skill to automatically scan a repository for vulnerabilities and submit a PR with the necessary fixes.

Quick Start

Scan a repository for vulnerabilities by using the command: vuln-scanner scan openai/whisper

Frequently Asked Questions about Vuln Scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security vulnerability scanning on GitHub repositories?▼

Automate security vulnerability scanning on GitHub by running static analysis on target repositories. This Skill orchestrates the scanning process and prepares the findings for responsible disclosure workflows.

How does private vulnerability reporting work for discovered GitHub issues?▼

Private vulnerability reporting works by submitting advisories directly to repository maintainers. This Skill automates re-submitting queued advisories for repositories that have enabled private vulnerability reporting features.

Can I send email disclosures for private vulnerabilities found in repos?▼

Yes, you can send armed email disclosures for private vulnerabilities. The Skill manages the notification process to securely communicate vulnerability details to the appropriate contacts.

Do I need GitHub API permissions to submit a PR with security patches?▼

Yes, you need GitHub API access and appropriate permissions to submit a PR with security patches. The Skill requires these credentials to facilitate automated public patching and private vulnerability reporting.

What is the best way to facilitate responsible disclosure for trending repos?▼

The best way to facilitate responsible disclosure for trending repos is to combine vulnerability scanning with automated advisory submission. This Skill audits trending repositories and manages the disclosure process end-to-end.