Vuln Scanner

Identify and triage security vulnerabilities in trending GitHub repositories.

Updated Jun 3, 2026
One-click install
npx skills add https://github.com/swarm-ai-research/aeon --skill vuln-scanner-swarm-ai-research
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Vuln Scanner
Source: https://github.com/swarm-ai-research/aeon/tree/main/skills/vuln-scanner
Command: npx skills add https://github.com/swarm-ai-research/aeon --skill vuln-scanner-swarm-ai-research

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

A security scanning and disclosure workflow that identifies, triages, and routes real vulnerabilities found in trending repositories to safe channels, balancing proactive defense with responsible disclosure.

Core Features & Use Cases

  • Automated multi-tool vulnerability discovery using SAST, secret scanning, and contract analysis.
  • Triage, deduplication, and routing of findings to private advisories (PVR), or appropriate disclosure channels including dependency PRs when possible.
  • Comprehensive logging, reporting, and notification to maintainers and stakeholders.

Quick Start

Run the vuln-scan against a target repository to identify security issues and route them through the safe disclosure workflow.

Frequently Asked Questions about Vuln Scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan GitHub repositories for security vulnerabilities?

To scan GitHub repositories for security vulnerabilities, this skill automates multi-tool discovery using SAST, secret scanning, and contract analysis to identify real security issues in trending codebases.

What is the best way to triage and report security vulnerabilities found in open source projects?

The best way to triage and report security vulnerabilities is to apply a defined workflow that classifies findings, deduplicates results, and routes them to private advisories or appropriate disclosure channels.

Can I automate responsible disclosure for vulnerabilities detected during repository audits?

Yes, you can automate responsible disclosure by routing detected vulnerabilities through a safe workflow that enforces reporting policies, avoiding public exposure of sensitive data and notifying maintainers directly.

Does automated vulnerability scanning handle secret detection and dependency issues?

Automated vulnerability scanning handles secret detection and dependency issues by running multi-tool discovery and routing dependency fixes through appropriate disclosure channels including dependency PRs.

How do I prevent public exposure of sensitive data when auditing trending GitHub repositories?

To prevent public exposure of sensitive data when auditing trending GitHub repositories, the scanning workflow enforces strict safety policies and routes findings exclusively to private advisories and secure disclosure channels.