skills.rest
TravisLeeeeee
TravisLeeeeeeCOMMUNITY
Explore all skills by this author →
GitHub

Vuln Scanner

Prioritize exploitable CVEs in dependency graphs with remediation actions.

110|18|Updated Mar 25, 2026
Search Tags:#cve#remediation planning#dependency scanning#compliance mapping#false positive#vulnerability triage#reachability analysis
One-click install
npx skills add https://github.com/TravisLeeeeee/awesome-openclaw-personas --skill vuln-scanner-travisleeeeee
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Vuln Scanner
Source: https://github.com/TravisLeeeeee/awesome-openclaw-personas/tree/main/personas/security/vuln-scanner
Command: npx skills add https://github.com/TravisLeeeeee/awesome-openclaw-personas --skill vuln-scanner-travisleeeeee

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps teams cut through vulnerability noise by identifying which CVEs matter for their actual environment and by producing concrete remediation actions.

Core Features & Use Cases

  • Context-aware CVE prioritization: ranks issues by exploitability, business impact, and relevance rather than CVSS alone.
  • Dependency reachability analysis: checks whether vulnerable packages are actually present and whether affected code paths are reachable in your stack.
  • Remediation planning: generates specific upgrade paths and workarounds, plus resolution tracking and compliance mapping (e.g., SOC 2, PCI-DSS).
  • Use Case: Prepare a weekly vulnerability triage report for a production app by scanning dependencies, isolating truly exploitable items, and outputting prioritized fix instructions for engineering and security.

Quick Start

Copy the vuln-scanner folder into your OpenClaw workspace so you can start scanning your project dependencies immediately.

Frequently Asked Questions about Vuln Scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize exploitable CVEs in my dependency graph?▼

Dependency reachability analysis checks whether vulnerable packages are actually present in your stack and whether the affected code paths are reachable, helping to filter out theoretical vulnerabilities that do not impact your production application.

How do I generate a vulnerability triage report with concrete remediation actions?▼

False positive reasoning is applied during vulnerability triage to filter out non-exploitable items, ensuring that your remediation planning and compliance mapping efforts focus only on vulnerabilities that pose a genuine risk to your software repository.

Does vulnerability triage support compliance mapping for SOC 2 and PCI-DSS?▼

To start scanning dependencies, copy the vuln-scanner folder into your OpenClaw workspace; no external dependencies or components are required, allowing you to immediately assess your project's dependency graph and stack context.

What is the best way to cut through vulnerability noise and identify which CVEs matter?▼

The best way to cut through vulnerability noise is to perform context-aware CVE prioritization that ranks issues by exploitability and business impact, applies reachability analysis to your stack, and produces concrete remediation actions for your specific environment.

Related Skills

Explore More Software Engineering Skills→
stark-ai-destark-ai-de
4

dependency-update-review

Review dependency updates for security and compatibility issues in software projects.

Official
Advanced
Scheune10-codingScheune10-coding

dependency-auditor

Scan dependencies for vulnerabilities, license compliance, and upgrade risks.

Community
Advanced
philo-grovesphilo-groves
12

maxtac-sast-control-flow-graph

Construct static analysis graphs for reachability, guard dominance, and path feasibility.

Community
Advanced
hung-phanhung-phan

vulnerability-management

Prioritize CVEs using CVSS, EPSS, KEV, and reachability analysis.

Community
Advanced