Security audit
Security checks for vulnerabilities and agentic risk
The skill provides clearly scoped security scans, with explicit controls over private configuration access and online lookups.
Choose a specific scan target and authorize client discovery separately. Online checks disclose package names and versions; use offline mode for private identifiers unless sharing is approved, while retaining coverage warnings. Consider installing a reviewed, pinned scanner version. This review covers the skill instructions, not a security audit of the separately installed Python package.
The vulnerability-checking and scanning commands align with the description, and --no-discover respects the discovery restriction. Tool installation and scan-output generation are supporting implementation details. However, Sigstore provenance verification is a distinct supply-chain authenticity check, not vulnerability checking or CVE inspection, and is not included in the declared purpose.
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.
- "~/Library/Application Support/Claude/claude_desktop_config.json"
- "~/.config/Claude/claude_desktop_config.json"
# Claude Code
- "~/.claude/settings.json"
- "~/.claude.json"
# Cursor
- "~/.cursor/mcp.json"
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.
# VS Code Copilot
- "~/Library/Application Support/Code/User/mcp.json"
# Codex CLI
- "~/.codex/config.toml"
# Gemini CLI
- "~/.gemini/settings.json"
# Goose
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.
# Codex CLI
- "~/.codex/config.toml"
# Gemini CLI
- "~/.gemini/settings.json"
# Goose
- "~/.config/goose/config.yaml"
# Continue
Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.
# Goose
- "~/.config/goose/config.yaml"
# Continue
- "~/.continue/config.json"
# Zed
- "~/.config/zed/settings.json"
# Roo Code
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- "configured local scanner state and vulnerability caches"
- "user-requested report or SBOM output paths"
network_endpoints:
- url: "https://api.osv.dev/v1"
purpose: "OSV vulnerability database — batch CVE lookup for packages"
auth: false
- url: "https://services.nvd.nist.gov/rest/json/cves/2.0"
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- url: "https://services.nvd.nist.gov/rest/json/cves/2.0"
purpose: "NVD CVSS v4 enrichment — optional API key increases rate limit"
auth: false
- url: "https://api.first.org/data/v1/epss"
purpose: "EPSS exploit probability scores"
auth: false
- url: "https://api.github.com/advisories"
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- url: "https://api.first.org/data/v1/epss"
purpose: "EPSS exploit probability scores"
auth: false
- url: "https://api.github.com/advisories"
purpose: "GitHub Security Advisories — supplemental CVE lookup"
auth: false
telemetry: false
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Show CVEs even when NVD analysis is pending or severity is `unknown` — a CVE ID is still a real finding.
- Treat `UNKNOWN` severity as unresolved, not benign — it means data is not yet available.
- Do not install packages, execute discovered commands, edit dependencies or change system configuration as part of a scan. Installation in the setup example is a separate user action.
- Allow only the scanner's local state/cache writes and explicitly requested reports; do not overwrite unrelated files.
- Online lookups transmit package identifiers and versions. Confirm permission before querying private identifiers, or use offline mode and report its coverage gaps.
- Read only the authorized targets, whether inside or outside the user's home directory. Never print raw credentials or upload configuration contents.
No suspicious patterns detected.