vulnerability-scanner
Security vulnerability scanning for dependencies and code, with CVE database checking and risk assessment
npx skills add a5c-ai/babysitter --skill vulnerability-scanner --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Vulnerability Scanner Skill Performs comprehensive security vulnerability scanning for dependencies and code, integrating with CVE databases and security platforms to identify, assess, and prioritize security risks for migration planning. ## Purpose Enable comprehensive security vulnerability detection for: - CVE database checking for known vulnerabilities - Severity assessment and prioritization - Exploitability analysis - Patch availability checking - Transitive vulnerability chain mapping - Risk scoring and remediation guidance ## Capabilities ### 1. CVE Database Checking - Query NVD (National Vulnerability Database) - Check GitHub Advisory Database - Query vendor-specific advisory databases - Cross-reference multiple CVE sources - Track CVE publication dates and updates ### 2. Severity Assessment - CVSS (Common Vulnerability Scoring System) scoring - Severity categorization (Critical, High, Medium, Low) - Environmental score adjustments - Temporal score analysis - Impact assessment ### 3. Exploitability Analysis - Check for known exploits in the wild - Assess attack vector complexity - Evaluate privileges required - Analyze user interaction requirements - Track exploit maturi
- Purpose
- Capabilities
- 1. CVE Database Checking
- 2. Severity Assessment
- 3. Exploitability Analysis
- 4. Patch Availability Checking
- 5. Transitive Vulnerability Chain Mapping
- 6. Risk Scoring
- Tool Integrations
- Usage
- Basic Scanning
- Scanning Workflow
- Output Schema
- Integration with Migration Processes
Invoke skill for vulnerability scanning The skill will scan dependencies and optionally code Expected inputs:
What does the vulnerability-scanner skill do?
Security vulnerability scanning for dependencies and code, with CVE database checking and risk assessment
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill vulnerability-scanner --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.