How do I install the Oss Vulnerabilities skill?

Run npx skillmds@latest add aibot88/oss-vulnerabilities in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Oss Vulnerabilities safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Oss Vulnerabilities?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Oss Vulnerabilities free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Oss Vulnerabilities?

aibot88 (@aibot88) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Oss Vulnerabilities by aibot88 — Agent Skill

Name: Oss Vulnerabilities
Rating: 4.666666666666667 (3 reviews)
Author: aibot88

File contents

OSS Vulnerabilities — Skill Entry

This SKILL.md is the entrypoint for the OSS Vulnerabilities skill.

The skill encodes the OWASP Open Source Software Top 10 as structured, machine-readable references that an agent can query to identify, assess, and remediate risks associated with open source software dependencies.

Normative references (OSS Top 10)

00 Vulnerability Index
01 Known Vulnerabilities
02 Compromise of Legitimate Package
03 Name Confusion Attacks
04 Unmaintained Software
05 Outdated Software
06 Untracked Dependencies
07 License and Regulatory Risk
08 Immature Software
09 Unapproved Change
10 Under/Over-sized Dependency

Skill layout

SKILL.md — this file (skill entrypoint).
references/ — the OSS Top 10 normative documents.
- 00-vulnerability-index.md — master index of all vulnerability identifiers, categories, and cross-references.
- 01 through 10 — one document per vulnerability aligned with OWASP OSS Risk numbering.
assets/ — reusable format and constants blocks.
- constants/ — vulnerability catalog and category definitions.
  - constants-oss-catalog-v1.0.0.md
- formats/ — output contract examples.
  - format-vulnerability-assessment-v1.0.0.md
  - format-remediation-checklist-v1.0.0.md

---name: oss-vulnerabilitiesdescription: OWASP Open Source Software Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in open source software dependencies.license: MIT--- # OSS Vulnerabilities — Skill Entry This `SKILL.md` is the **entrypoint** for the OSS Vulnerabilities skill. The skill encodes the **OWASP Open Source Software Top 10** as structured, machine-readable references that an agent can query to identify, assess, and remediate risks associated with open source software dependencies. ## Normative references (OSS Top 10) 1. [00 Vulnerability Index](references/00-vulnerability-index.md) 2. [01 Known Vulnerabilities](references/01-known-vulnerabilities.md) 3. [02 Compromise of Legitimate Package](references/02-compromise-legitimate-package.md) 4. [03 Name Confusion Attacks](references/03-name-confusion-attacks.md) 5. [04 Unmaintained Software](references/04-unmaintained-software.md) 6. [05 Outdated Software](references/05-outdated-software.md) 7. [06 Untracked Dependencies](references/06-untracked-dependencies.md) 8. [07 License and Regulatory Risk](references/07-license-regulatory-risk.md) 9. [08 Immature Software](references/08-immature-software.md) 10. [09 Unapproved Change](references/09-unapproved-change.md) 11. [10 Under/Over-sized Dependency](references/10-underoversized-dependency.md) ## Skill layout - `SKILL.md` — this file (skill entrypoint). - `references/` — the OSS Top 10 normative documents. - `00-vulnerability-index.md` — master index of all vulnerability identifiers, categories, and cross-references. - `01` through `10` — one document per vulnerability aligned with OWASP OSS Risk numbering. - `assets/` — reusable format and constants blocks. - `constants/` — vulnerability catalog and category definitions. - `constants-oss-catalog-v1.0.0.md` - `formats/` — output contract examples. - `format-vulnerability-assessment-v1.0.0.md` - `format-remediation-checklist-v1.0.0.md`

Frequently asked questions

Oss Vulnerabilities