CVE Scan

by softspark

CVE Scan is a Quality skill for Claude Code, published by softspark in ai-toolkit.

170 stars20 forkson softspark/ai-toolkitAdded 2026/09/08+2% in starsRepository updated 2026/09/07

View source on GitHub Download repo ZIP

ai-agentsai-skillsanthropicclaudeclaude-codeclinecodexcopilotcursorgeminimcpopencodetoolkitwindsurf

Install in seconds

Install CVE Scan

Copy CVE Scan into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/softspark/ai-toolkit/tree/main/app/skills/cve-scan ~/.claude/skills/cve-scan

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/softspark/ai-toolkit.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: app/skills/cve-scan/SKILL.md in softspark/ai-toolkit
Installs to: ~/.claude/skills/cve-scan
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1897 skills

What CVE Scan does

CVE Scan detects project ecosystems and runs native audit tools to report known dependency vulnerabilities. Use it to check npm, pip, Cargo, Go, Composer, Bundler, or Dart projects and optionally auto-fix supported issues.

CVE Scan is cataloged under Quality on DirSkills. CVE Scan comes from a repository tagged ai-agents, ai-skills, anthropic, claude and claude-code.

Documentation

README

Excerpt

/cve-scan - Dependency CVE Scanner

$ARGUMENTS

Detect project ecosystems and scan dependencies for known vulnerabilities using native audit tools. Zero external dependencies — uses tools already installed in the project environment.

Usage

/cve-scan                        # Auto-detect all ecosystems, scan all
/cve-scan --ecosystem npm        # Force specific ecosystem
/cve-scan --fix                  # Auto-fix where possible (npm audit fix, etc.)
/cve-scan --json                 # Machine-readable JSON output

This is the opening of the README. Read the full README on GitHub.

Commands CVE Scan provides

Slash commands named in this skill’s SKILL.md, listed in the order they first appear.

/cve-scan

Frequently asked about CVE Scan

What else does softspark publish alongside CVE Scan?
CVE Scan is one of 25 skills that DirSkills catalogs from softspark/ai-toolkit, the repository it ships in. Its siblings there include API Patterns, Accessibility Validator and Agent Creator. Each one is a separate skill with its own page in this directory, installs the same way CVE Scan does, and is maintained by softspark in that same repository. The rest of the collection is listed on the softspark/ai-toolkit page.
How does CVE Scan compare to other Quality skills?
CVE Scan ranks #1754 by stars among the 1897 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of CVE Scan against them. Open each page to compare what they document and how they install.