exploits-search
Search for exploits across all vulnerabilities with filtering by ecosystem, severity, source, and EPSS
Profile →npx skills add davepoon/buildwithclaude --skill exploits-search --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Vulnetix Exploit Search Skill This skill searches for vulnerabilities with known exploits across the entire VDB, with filtering by ecosystem, severity, exploit source, EPSS score, and CISA KEV status. Use it to **discover** exploited vulnerabilities relevant to your repository's technology stack. **This skill does not modify application code** -- it only updates `.vulnetix/memory.yaml` to track findings. **How this differs from `/vulnetix:exploits`:** The existing `/vulnetix:exploits <vuln-id>` skill performs deep analysis of a *single known* vulnerability (PoC fetching, ATT&CK mapping, CWSS scoring). This skill *discovers* exploited vulnerabilities across the landscape, optionally filtered to your repository's ecosystems. ## Vulnerability Memory (.vulnetix/memory.yaml) This skill reads and updates the `.vulnetix/memory.yaml` file in the repository root. This file is shared with `/vulnetix:fix`, `/vulnetix:exploits`, `/vulnetix:package-search`, `/vulnetix:vuln`, and `/vulnetix:remediation`. ### Schema The canonical schema is defined in `/vulnetix:fix`. This skill creates minimal stub entries for newly discovered vulnerabilities that affect the repository. ### Reading Prior State
- Vulnerability Memory (.vulnetix/memory.yaml)
- Schema
- Reading Prior State
- Writing Updated State
- VEX Status Mapping
- Workflow
- Step 1: Load Memory and Detect Repository Ecosystems
- Step 2: Parse Filters from User Message
- Step 3: Execute Exploit Search
- Step 4: Present Results
- Step 5: Update Vulnerability Memory
- Error Handling
- Important Reminders
vulnetix vdb exploits search [flags] -o json Search for critical npm exploits vulnetix vdb exploits search --ecosystem npm --severity CRITICAL -o json CISA KEV entries with high EPSS vulnetix vdb exploits search --in-kev --min-epss 0.5 --sort epss -o json Free-text search vulnetix vdb exploits search -q "remote code execution" --ecosystem npm -o json Metasploit modules for Maven vulnetix vdb exploits search --source metasploit --ecosystem maven -o json Sort by exploitation maturity
What does the exploits-search skill do?
Search for exploits across all vulnerabilities with filtering by ecosystem, severity, source, and EPSS
How do I install it?
Run `npx skills add davepoon/buildwithclaude --skill exploits-search --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From davepoon/buildwithclaude, a repository with 3,251 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.