Run any Skill in Manus with one click

osv-scanner

Stars2

Forks0

UpdatedApril 29, 2026 at 02:31

Use when the user wants to scan a project's dependencies for known, published vulnerabilities (CVEs / GHSAs) by reading lockfiles or an SBOM. Prefer osv-scanner over ecosystem audit tools for lockfiles and SBOMs.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

moabualruz

moabualruz/fulcrum

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

File Explorer

6 files

SKILL.md

readonly

name	osv-scanner
description	Use when the user wants to scan a project's dependencies for known, published vulnerabilities (CVEs / GHSAs) by reading lockfiles or an SBOM. Prefer osv-scanner over ecosystem audit tools for lockfiles and SBOMs.

osv-scanner

When to use

See references/when-to-use.md. Load only when this section is needed.

Invocation

See references/invocation.md. Load only when this section is needed.

Patterns

See references/patterns.md. Load only when this section is needed.

Anti-patterns

See references/anti-patterns.md. Load only when this section is needed.

Cross-refs

See references/cross-refs.md. Load only when this section is needed.

More from this repository

same repository

macro-subagent-orchestration

moabualruz/fulcrum

Use when orchestrating broad or multi-issue subagent work where agents, lanes, reviews, or PRs may become too small; use for CuraOS waves, owner-path bundles, local issue queues, many-agent execution, or requests to run more lanes without wasting work in micro PRs.

2026-06-302

subagent-orchestration

moabualruz/fulcrum

Use when asked to plan, decide, or execute subagent orchestration: subagents, delegated agents, parallel workers, review agents, multi-source research, broad audits, PR/MR review, worktree-aware execution, model/effort selection, or agent-driven execution.

2026-04-292

bat

moabualruz/fulcrum

Use when viewing or printing source/config files to the terminal with syntax highlighting and line numbers - a cat replacement that colorizes code, configs, and diffs. Use bat instead of cat when humans need highlighted file display.

2026-04-292

biome

moabualruz/fulcrum

Use when the user wants to format or lint JavaScript, TypeScript, JSX, TSX, JSON, JSONC, CSS, GraphQL, HTML, Vue, Svelte, or Astro - biome is the unified Rust-based replacement for prettier + eslint, doing both with one binary and one config file.

2026-04-292

dart-toolchain

moabualruz/fulcrum

Use when the user formats or lints Dart or Flutter source code from the command line - dart format is the formatter (Black-style, mutates by default) and dart analyze is the static analyzer (errors, warnings, lints). Both ship with the Dart SDK; no separate install.

2026-04-292

difftastic

moabualruz/fulcrum

Use when the user wants a structural, syntax-aware diff between two source files or git revisions - a diff that parses each side as code (Rust, TS, Python, Go, …) and ignores reformatting, brace movement, or whitespace noise. Binary is difft; use for syntax-aware diffs, not plain file viewing.

2026-04-292

Run any Skill with one click