vuln

Look up vulnerability identifiers and package vulnerabilities via Vulnetix CLI.

9|1|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/Vulnetix/pix-ai-coding-assistant --skill vuln-vulnetix
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vuln
Source: https://github.com/Vulnetix/pix-ai-coding-assistant/tree/main/vulnetix/skills/vuln
Command: npx skills add https://github.com/Vulnetix/pix-ai-coding-assistant --skill vuln-vulnetix

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides vulnerability intelligence by looking up a vulnerability identifier (e.g., CVE, GHSA) or listing all vulnerabilities for a given package, and records findings to a local memory store for cross-skill context.

Core Features & Use Cases

  • Vulnerability lookup by identifier: fetch detailed data and assess impact on the repository.
  • Package vulnerability listing: enumerate all known vulnerabilities for a package and identify affected installed versions.
  • Memory tracking: log interactions to .vulnetix/memory.yaml to enable context-aware remediation and follow-up actions.
  • Non-code modification: this skill does not alter your application code; it updates memory only.

Quick Start

Look up a vulnerability by ID or package name and let the skill update your vulnerability memory.

Frequently Asked Questions about vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I look up a CVE vulnerability by its identifier in my repository?

To look up a CVE vulnerability, provide the identifier to fetch detailed intelligence and assess its impact on your repository. The skill uses the Vulnetix CLI to retrieve data and records findings to .vulnetix/memory.yaml for context-aware remediation.

Can I list all known vulnerabilities for a specific package version?

Yes, you can list all known vulnerabilities for a specific package. The skill enumerates vulnerabilities for the package and identifies whether your installed versions are affected, storing the results in local memory.

Does vulnerability lookup work with SBOMs and dependency manifests?

Vulnerability lookup applies to codebases with dependency manifests and SBOMs. The skill fetches vulnerability data using the Vulnetix CLI and records findings in .vulnetix/memory.yaml to enable cross-skill context.

How do I track vulnerability findings for follow-up remediation actions?

You can track vulnerability findings by logging interactions to .vulnetix/memory.yaml. This memory tracking enables context-aware remediation and follow-up actions without altering your application code.

Will running a package vulnerability assessment modify my source code?

Running a package vulnerability assessment will not modify your source code. The skill performs non-code modification, updating only the local memory store at .vulnetix/memory.yaml with vulnerability findings.