Vulnerability Scanner Skill
npx skills add https://github.com/JansenAnalytics/claudex --skill vuln-scannerCopy and paste this command into Claude Code to install the skill
| name | vuln-scanner |
| description | Vulnerability Scanner Skill |
| category | security |
| maturity | beta |
| tags | ["vulnerability-scanning","npm-audit","cve","cron","alerts"] |
Use when: checking if any projects have security vulnerabilities, or when adding a new npm project.
node ${VULN_SCANNER_HOME:-$HOME/projects/vuln-scanner}/scan.cjs
node ${VULN_SCANNER_HOME:-$HOME/projects/vuln-scanner}/scan.cjs --project
node ${VULN_SCANNER_HOME:-$HOME/projects/vuln-scanner}/scan.cjs --dry-run
node ${VULN_SCANNER_HOME:-$HOME/projects/vuln-scanner}/report.cjs
Weekly on Sundays at 09:00: scans all projects with package.json in $HOME/projects/
${VULN_SCANNER_HOME:-$HOME/projects/vuln-scanner}/config.json
node ${VULN_SCANNER_HOME:-$HOME/projects/vuln-scanner}/add-project.cjs --path ~/projects/ --manager npm
Semantic memory search across all agent memories and conversation history. Use BEFORE answering questions about prior work, decisions, dates, people, preferences, projects, or past conversations. Also use when asked "do you remember", "what did we discuss", "when did we", etc.
Get current weather and forecasts. Use when the user asks about weather, temperature, or forecasts for any location.
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
Accessibility auditing: WCAG compliance checking, contrast ratios, ARIA labels, keyboard navigation, semantic HTML, screen reader compatibility.
ADR Manager Skill
Autonomous API testing and evaluation. Tests any REST API for correctness, security, performance, error handling, and standards compliance. Discovers endpoints, probes with valid/invalid/edge-case payloads, checks auth, response times, injection vulnerabilities, and generates severity-scored reports with actionable fixes. Use before any API "done" claim.
