Query OSV database for package vulnerabilities and scan local projects.
npx skills add https://github.com/x-cmd/x-cmd --skill x-osv
Please help me install this Agent Skill. Skill: x-osv Source: https://github.com/x-cmd/x-cmd/tree/main/mod/osv Command: npx skills add https://github.com/x-cmd/x-cmd --skill x-osv
This Skill helps in identifying vulnerabilities in packages and scanning local projects for vulnerable dependencies.
osv-scanner.To query vulnerabilities for a package, use the command:
x osv q -p jq -v 1.7.1
To scan a local project for vulnerabilities, use the command:
x osv scanner .
High-intent search queries and answers about installing and using this skill.
You can scan a local project for vulnerable dependencies by running `x osv scanner .` in your project directory to identify security issues using osv-scanner.
Yes, you can query the OSV database for a specific package vulnerability by running a command like `x osv q -p jq -v 1.7.1` to check that exact version.
Yes, this vulnerability scanner supports multiple ecosystems including npm, pip, Maven, Go, and Rust, allowing you to scan diverse project dependencies for security issues.
You can generate SARIF security reports by scanning your local project for vulnerabilities, which outputs results in various formats including the standard SARIF report structure.
Yes, you need both x-cmd and osv-scanner installed as dependencies, because the Skill automates the querying process by running these underlying tools to fetch vulnerability data.
igbuendScan project dependencies for known vulnerabilities using Google OSV-Scanner.
SuperlendParse SARIF 2.1.0 files and extract structured findings for reporting.
BigdropsDetect project types, apply safe dependency updates, and perform security audits.
dy9759Identify and remediate security vulnerabilities across IT infrastructure and applications.