skills.rest
AppThreat
AppThreatOFFICIAL
Explore all skills by this author →
Website𝕏@AppThreatGitHub

vulnerability-db

Search vulnerability databases by purl, cpe, CVE ID, and metadata.

145|23|Updated Jan 20, 2020
Search Tags:#security#GitHub#CVE#vulnerability management#OSV#NVD
One-click install
npx skills add https://github.com/AppThreat/vulnerability-db --skill vulnerability-db
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-db
Source: https://github.com/AppThreat/vulnerability-db/tree/main
Command: npx skills add https://github.com/AppThreat/vulnerability-db --skill vulnerability-db

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires httpx, appdirs, orjson, semver, packageurl-python, cvss, pydantic[email], rich, apsw, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive database of vulnerabilities from various sources, allowing for efficient management and search of vulnerabilities without manual data entry.

Core Features & Use Cases

  • Pre-built Databases: Access pre-built databases of vulnerabilities, including application and OS vulnerabilities, with various timeframes and scope options.
  • Search Functionality: Search for vulnerabilities using various criteria like purl, cpe, CVE ID, and metadata such as severity, date, and source.
  • Integration: Use the skill as a Python library or via CLI for seamless integration with other systems.

Quick Start

Download the appropriate VDB database with vdb --download-image and use the CLI to search for vulnerabilities by vdb search "pkg:pypi/[email protected]".

Frequently Asked Questions about vulnerability-db

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I search for vulnerabilities by package URL or CVE ID offline?▼

Pre-built SQLite vulnerability databases enable efficient offline vulnerability searches by purl, cpe, CVE ID, and metadata. Download the appropriate database using `vdb --download-image` and query via CLI, such as `vdb search "pkg:pypi/[email protected]"`.

What is the best way to manage vulnerability data for security auditing without manual entry?▼

Using pre-built SQLite databases aggregates vulnerabilities from various sources for efficient management without manual entry. This database integrates directly into security auditing and vulnerability management workflows via Python library or CLI integration.

Do I need Python 3.10 or higher to use the vulnerability database?▼

Yes, using this vulnerability database requires Python >= 3.10. You must also install specific dependencies including httpx, appdirs, orjson, semver, packageurl-python, cvss, pydantic, rich, and apsw to ensure proper functionality.

Can I search for OS and application vulnerabilities using a local database?▼

Yes, you can search for both application and OS vulnerabilities locally. The skill provides pre-built databases with various timeframes and scope options, enabling efficient offline access to comprehensive vulnerability data for dependency scanning.

How does offline vulnerability searching work with SQLite and purl?▼

Offline vulnerability searching works by querying pre-built SQLite databases using package URLs (purl), CPEs, or CVE IDs. This mechanism allows fast, local lookups of vulnerability metadata including severity, date, and source without requiring live API calls.

Are there limitations when using pre-built databases for vulnerability management?▼

The primary limitation of pre-built databases is the need to manually download and update them to access the latest vulnerabilities. Users must manage the database refresh cycle to ensure their offline vulnerability searches remain current and accurate.

Related Skills

Explore More Software Engineering Skills→
a2ngerera2ngerer
5

graphify-setup

Install Graphify and wire its hook and slash command for Claude Code.

Community
Advanced
msaad00msaad00
29

agent-bom-scan

Automate CVE scanning of packages and container images with SBOM generation.

Community
Advanced
jmaglyjmagly
175

supply-chain-forensics

Analyze software supply chains with SBOM generation, dependency verification, and SLSA mapping.

Community
Advanced
reececoakes99reececoakes99

cve-tracker

Track and assess CVEs affecting payment infrastructure using NVD and external databases.

Community
Intermediate