Scan project dependencies for known vulnerabilities. Automatically detect and parse package files (package.json, requirements.txt, Gemfile, go.mod, pom.xml) and check all dependencies against the CVE database. Use when you want to audit a project for security vulnerabilities, check if dependencies have known CVEs, or generate a vulnerability report for compliance.
安装
npx skills add Mearman/marketplace --skill cve-auditnpx skills add Mearman/marketplace --skill cve-audit -a claude-code -gnpx skills add Mearman/marketplace --skill cve-audit -a codex -ggemini skills install https://github.com/Mearman/marketplace.git --path plugins/cve-search/skills/cve-auditgh skill install Mearman/marketplace cve-auditgit clone --depth 1 https://github.com/Mearman/marketplace /tmp/Mearman__marketplace
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/Mearman__marketplace/plugins/cve-search/skills/cve-audit ~/.claude/skills/cve-audit # Claude Code
cp -R /tmp/Mearman__marketplace/plugins/cve-search/skills/cve-audit ~/.agents/skills/cve-audit # Codex, Cursor, Gemini CLI, Copilot, OpenCode