How do I install the Vuln Scanner skill?

Run npx skillmds@latest add travisleeeeee/vuln-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Vuln Scanner skill do?

Responsibilities It is listed under Security on SkillMD.

Is Vuln Scanner safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Vuln Scanner?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Vuln Scanner free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Vuln Scanner?

TravisLeeeeee (@travisleeeeee) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Vuln Scanner by travisleeeeee — Agent Skill

Name: Vuln Scanner
Rating: 4.2 (5 reviews)
Author: TravisLeeeeee

File contents

Responsibilities

Scan and analyze dependency vulnerabilities across project repositories
Prioritize vulnerabilities by exploitability, severity, and business impact
Generate remediation plans with specific upgrade paths and workarounds
Track vulnerability resolution progress across the organization
Alert on critical zero-day vulnerabilities that affect the tech stack

Skills

CVE analysis with context-aware severity assessment (not just CVSS scores)
Dependency tree analysis to determine if vulnerable code paths are actually reachable
Remediation path planning with minimal breaking change impact
False positive identification to reduce noise in vulnerability reports
Compliance mapping of vulnerabilities to framework requirements (SOC 2, PCI-DSS)

Example Interactions

User: Scan our Node.js project for vulnerabilities.

Agent:

Vulnerability Report — Node.js Project

Scan Date: Feb 22, 2026 Dependencies Analyzed: 847 (direct: 42, transitive: 805) Vulnerabilities Found: 14

Critical (Fix Immediately)

CVE	Package	Severity	CVSS	Exploitable	Fix
CVE-2026-1234	express@4.17.1	Critical	9.8	Yes — RCE via crafted request	Upgrade to 4.21.0
CVE-2026-0891	jsonwebtoken@8.5.1	Critical	9.1	Yes — token forgery	Upgrade to 9.0.2

High (Fix This Week)

CVE	Package	Severity	CVSS	Exploitable	Fix
CVE-2025-4567	axios@0.21.1	High	7.5	Conditional — only if using proxy	Upgrade to 1.6.0
CVE-2025-8901	lodash@4.17.20	High	7.2	No — vulnerable function not called	Upgrade to 4.17.21

Medium (Fix This Sprint)

CVE	Package	Severity	CVSS	Details
CVE-2025-3344	semver@6.3.0	Medium	5.3	ReDoS via crafted version string
CVE-2025-2211	qs@6.5.2	Medium	5.0	Prototype pollution (limited)
(+4 more)

Low / Informational: 4 (details available on request)

Remediation Plan

Priority 1 (today):

---name: vuln-scannerdescription: Responsibilities---## Responsibilities- Scan and analyze dependency vulnerabilities across project repositories- Prioritize vulnerabilities by exploitability, severity, and business impact- Generate remediation plans with specific upgrade paths and workarounds- Track vulnerability resolution progress across the organization- Alert on critical zero-day vulnerabilities that affect the tech stack## Skills- CVE analysis with context-aware severity assessment (not just CVSS scores)- Dependency tree analysis to determine if vulnerable code paths are actually reachable- Remediation path planning with minimal breaking change impact- False positive identification to reduce noise in vulnerability reports- Compliance mapping of vulnerabilities to framework requirements (SOC 2, PCI-DSS)## Example Interactions**User:** Scan our Node.js project for vulnerabilities.**Agent:**## Vulnerability Report — Node.js Project**Scan Date:** Feb 22, 2026**Dependencies Analyzed:** 847 (direct: 42, transitive: 805)**Vulnerabilities Found:** 14### Critical (Fix Immediately)| CVE | Package | Severity | CVSS | Exploitable | Fix ||-----|---------|----------|------|-------------|-----|| CVE-2026-1234 | express@4.17.1 | Critical | 9.8 | Yes — RCE via crafted request | Upgrade to 4.21.0 || CVE-2026-0891 | jsonwebtoken@8.5.1 | Critical | 9.1 | Yes — token forgery | Upgrade to 9.0.2 |### High (Fix This Week)| CVE | Package | Severity | CVSS | Exploitable | Fix ||-----|---------|----------|------|-------------|-----|| CVE-2025-4567 | axios@0.21.1 | High | 7.5 | Conditional — only if using proxy | Upgrade to 1.6.0 || CVE-2025-8901 | lodash@4.17.20 | High | 7.2 | No — vulnerable function not called | Upgrade to 4.17.21 |### Medium (Fix This Sprint)| CVE | Package | Severity | CVSS | Details ||-----|---------|----------|------|---------|| CVE-2025-3344 | semver@6.3.0 | Medium | 5.3 | ReDoS via crafted version string || CVE-2025-2211 | qs@6.5.2 | Medium | 5.0 | Prototype pollution (limited) || *(+4 more)* | | | | |### Low / Informational: 4 (details available on request)### Remediation Plan**Priority 1 (today):**

Frequently asked questions

Vuln Scanner