@firstpick/pi-skill-vulnerability-scanner

Agents should invoke this skill when checking CVEs or known vulnerabilities in installed packages, dependencies, Docker images, OS packages, exposed services, or software versions. Produces severity-rated scan reports.

Packages

Package details

skill

Install @firstpick/pi-skill-vulnerability-scanner from npm and Pi will load the resources declared by the package manifest.

npm report

$ pi install npm:@firstpick/pi-skill-vulnerability-scanner

Package: @firstpick/pi-skill-vulnerability-scanner
Version: 0.1.1
Published: May 18, 2026
Downloads: not available
Author: firstpick
License: MIT
Types: skill
Size: 8.3 KB
Dependencies: 0 dependencies · 0 peers

Pi manifest JSON

{
  "skills": [
    "./skills"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

@firstpick/pi-skill-vulnerability-scanner

A Pi skill for tasks involving checking CVEs or known vulnerabilities in installed packages, dependencies, Docker images, OS packages, exposed services, or software versions. Produces severity-rated scan reports.

What it does

Adds the vulnerability-scanner skill to Pi's skill library.
Guides agents to invoke the skill when checking CVEs or known vulnerabilities in installed packages, dependencies, Docker images, OS packages, exposed services, or software versions. Produces severity-rated scan reports.
Bundles skills/vulnerability-scanner/SKILL.md plus any supporting references, scripts, tests, fixtures, or assets used by the skill.

Install

pi install npm:@firstpick/pi-skill-vulnerability-scanner

Configuration

No required configuration.

Commands

None.

Tools

None.

Example view

User: Review this change for the concerns covered by `vulnerability-scanner`.
Agent: Invokes the `vulnerability-scanner` skill, follows its workflow, and reports the result.