OSV-Scanner

Trigger / When to Use

Use this skill when the user wants a fast open-source dependency vulnerability scan based on the OSV database, especially for projects with lockfiles, package manifests, SBOMs, or git repositories.

Good trigger phrases:

• "scan dependencies with OSV"
• "check package-lock or go.sum for CVEs"
• "find vulnerable open-source packages"
• "scan this SBOM against OSV"
• "add OSV scanning to CI"

Core Capabilities