{
  "schema_version": "2026-03-26",
  "id": "vulnerability-scanner",
  "slug": "vulnerability-scanner",
  "display_name": "Vulnerability Scanner",
  "description": "Vulnerability scanning workflow skill. Use this skill when a user needs repeatable coverage for known vulnerabilities, unsafe patterns, or release hygiene.",
  "version": "0.0.1",
  "category": "testing-security",
  "raw_category": "testing-security",
  "taxonomy": {
    "raw_category": "testing-security",
    "canonical_category": "testing-security",
    "inferred_category": "testing-security",
    "category_source": "frontmatter"
  },
  "tags": [
    "security",
    "scanning",
    "dependencies",
    "sbom",
    "hardening",
    "release"
  ],
  "complexity": "advanced",
  "risk": "safe",
  "source": "omni-team",
  "author": "Omni Skills Team",
  "dates": {
    "added": "2026-03-26",
    "updated": "2026-03-27"
  },
  "entrypoint": "skills/vulnerability-scanner/SKILL.md",
  "paths": {
    "root": "skills/vulnerability-scanner",
    "manifest": "dist/manifests/vulnerability-scanner.json",
    "metadata": "skills/vulnerability-scanner/metadata.json"
  },
  "compatibility": {
    "tools": [
      "claude-code",
      "cursor",
      "gemini-cli",
      "codex-cli",
      "antigravity",
      "opencode"
    ],
    "install_targets": [
      {
        "tool": "claude-code",
        "scope": "user-global",
        "default_path": "~/.claude/skills",
        "installer_flag": "--claude",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": ">> /skill-name help me..."
      },
      {
        "tool": "cursor",
        "scope": "user-global",
        "default_path": "~/.cursor/skills",
        "installer_flag": "--cursor",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "@skill-name"
      },
      {
        "tool": "gemini-cli",
        "scope": "user-global",
        "default_path": "~/.gemini/skills",
        "installer_flag": "--gemini",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "Use @skill-name to..."
      },
      {
        "tool": "codex-cli",
        "scope": "user-global",
        "default_path": "~/.codex/skills",
        "installer_flag": "--codex",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "Use @skill-name to..."
      },
      {
        "tool": "antigravity",
        "scope": "user-global",
        "default_path": "~/.gemini/antigravity/skills",
        "installer_flag": "--antigravity",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "Use @skill-name to... (Agent Mode)"
      },
      {
        "tool": "opencode",
        "scope": "project-local",
        "default_path": ".opencode/skills",
        "installer_flag": "--opencode",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "opencode run @skill-name"
      }
    ]
  },
  "resources": {
    "sub_resources": [
      "agents",
      "examples",
      "references",
      "scripts"
    ],
    "artifacts_count": 8,
    "references_count": 1,
    "agents_count": 1,
    "assets_count": 0
  },
  "dependencies": {
    "skills": [],
    "external": []
  },
  "install": {
    "strategy": "copy-skill-directory",
    "current_installer": "npx omni-skills installs the full library by default today, and also supports selective installation with --skill and --bundle.",
    "recipes": [
      {
        "tool": "claude-code",
        "command": "npx omni-skills --claude",
        "scope": "user-global",
        "default_path": "~/.claude/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "cursor",
        "command": "npx omni-skills --cursor",
        "scope": "user-global",
        "default_path": "~/.cursor/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "gemini-cli",
        "command": "npx omni-skills --gemini",
        "scope": "user-global",
        "default_path": "~/.gemini/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "codex-cli",
        "command": "npx omni-skills --codex",
        "scope": "user-global",
        "default_path": "~/.codex/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "antigravity",
        "command": "npx omni-skills --antigravity",
        "scope": "user-global",
        "default_path": "~/.gemini/antigravity/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "opencode",
        "command": "npx omni-skills --opencode",
        "scope": "project-local",
        "default_path": ".opencode/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      }
    ]
  },
  "classification": {
    "maturity": {
      "skill_level": 3,
      "skill_level_label": "resources",
      "has_scripts": true,
      "has_extra_files": true
    },
    "best_practices": {
      "score": 99,
      "tier": "excellent",
      "signals": {
        "workflow_steps_count": 5,
        "workflow_section_length": 498,
        "when_to_use_section_length": 484,
        "best_practices_items_count": 6,
        "best_practices_section_length": 457,
        "troubleshooting_items_count": 0,
        "troubleshooting_section_length": 828,
        "resources_items_count": 5,
        "resources_section_length": 314,
        "examples_section_length": 498,
        "examples_code_blocks_count": 6,
        "related_skills_section_length": 297,
        "decision_assets_count": 12,
        "table_count": 7,
        "linked_resource_families_count": 4,
        "linked_resource_families": [
          "agents",
          "examples",
          "references",
          "scripts"
        ],
        "support_links_count": 5,
        "support_files_count": 6,
        "references_files_count": 1,
        "scripts_files_count": 1,
        "examples_files_count": 3,
        "agents_files_count": 1,
        "assets_files_count": 0,
        "tools_count": 6,
        "tags_count": 6,
        "body_density": 6.7
      }
    },
    "quality": {
      "score": 97,
      "tier": "platinum",
      "breakdown": {
        "body": 16,
        "description": 10,
        "metadata": 12,
        "recency": 8,
        "resources": 10,
        "best_practices": 10,
        "semantic_depth": 16,
        "operational_depth": 10,
        "support_pack": 10
      }
    },
    "security": {
      "score": 95,
      "tier": "review",
      "status": "passed",
      "findings_count": 0,
      "findings": [],
      "signals": {
        "scanned_files": 7,
        "script_files": 1,
        "binary_like_files": 0
      },
      "scanners": {
        "static": {
          "enabled": true,
          "status": "completed"
        },
        "clamav": {
          "enabled": true,
          "status": "completed",
          "provider": "clamav",
          "detections": [],
          "infected_files": 0
        },
        "virustotal": {
          "enabled": true,
          "status": "completed",
          "provider": "virustotal",
          "lookups": 1,
          "positives": 0,
          "results": [
            {
              "path": "skills/vulnerability-scanner/scripts/render_scan_packet.py",
              "sha256": "32ba72e55e9775d7c32e315fb9f74bd17007dc317b3ec1c815ffe6e08ec4ebdf",
              "status": "not_found"
            }
          ],
          "details": "Hash lookups only. Unknown files are not uploaded during validation."
        }
      }
    },
    "validation": {
      "errors": [],
      "warnings": [],
      "status": "passed"
    }
  },
  "content": {
    "body_length": 5103,
    "content_length": 5627,
    "body_lines": 105,
    "word_count": 704,
    "has_code_blocks": true,
    "typed_code_blocks_count": 1,
    "has_examples_section": true,
    "example_count": 3,
    "has_workflow_section": true,
    "has_when_to_use_section": true,
    "has_best_practices_section": true,
    "has_troubleshooting_section": true,
    "problem_count": 3,
    "troubleshooting_pairs_count": 2,
    "has_additional_resources_section": true,
    "has_related_skills_section": true,
    "related_skills_count": 3,
    "has_local_support_links": true,
    "local_support_links_count": 2,
    "has_local_script_example": true,
    "local_script_example_count": 0,
    "semantic_signals": {
      "workflow_steps_count": 5,
      "workflow_section_length": 498,
      "when_to_use_section_length": 484,
      "best_practices_items_count": 6,
      "best_practices_section_length": 457,
      "troubleshooting_items_count": 0,
      "troubleshooting_section_length": 828,
      "resources_items_count": 5,
      "resources_section_length": 314,
      "examples_section_length": 498,
      "examples_code_blocks_count": 6,
      "related_skills_section_length": 297,
      "decision_assets_count": 12,
      "table_count": 7,
      "linked_resource_families_count": 4,
      "linked_resource_families": [
        "agents",
        "examples",
        "references",
        "scripts"
      ],
      "support_links_count": 5,
      "support_files_count": 6,
      "references_files_count": 1,
      "scripts_files_count": 1,
      "examples_files_count": 3,
      "agents_files_count": 1,
      "assets_files_count": 0,
      "tools_count": 6,
      "tags_count": 6,
      "body_density": 6.7
    }
  },
  "artifacts": [
    {
      "path": "skills/vulnerability-scanner/SKILL.md",
      "kind": "entrypoint",
      "size_bytes": 5633,
      "sha256": "5f10ad123762087117fe82606041d508c1e6fdee802ab6c5fec0463543c96a03"
    },
    {
      "path": "skills/vulnerability-scanner/metadata.json",
      "kind": "support",
      "size_bytes": 6126,
      "sha256": "6052fed4145c957c105ac438d1e47bb17abaaea867ecc776fde2361503ac6ada"
    },
    {
      "path": "skills/vulnerability-scanner/agents/openai.yaml",
      "kind": "agent",
      "size_bytes": 251,
      "sha256": "fb84e0bc7604dceaf7dea048e748657f568d86cf8f7e9c41be70c9821157dbf3"
    },
    {
      "path": "skills/vulnerability-scanner/examples/false-positive-log-template.md",
      "kind": "support",
      "size_bytes": 126,
      "sha256": "707787eeeaf967d01391c6016899de81415348867edc254d04066bf2443d545a"
    },
    {
      "path": "skills/vulnerability-scanner/examples/finding-triage-matrix.md",
      "kind": "support",
      "size_bytes": 260,
      "sha256": "41b538a3ef02add358616225242287011f0abaa27e6e0d048f74fc99b786308a"
    },
    {
      "path": "skills/vulnerability-scanner/examples/release-scan-checklist.md",
      "kind": "support",
      "size_bytes": 202,
      "sha256": "54f9728550033fbc611f81282f1a52fe3078b714762c3ae971a1b326a22e97bc"
    },
    {
      "path": "skills/vulnerability-scanner/references/checklist.md",
      "kind": "reference",
      "size_bytes": 640,
      "sha256": "6d6b7e1ca4db9a25ed18d55d081fc264179b7d9457919b1c77c113f75b4d5969"
    },
    {
      "path": "skills/vulnerability-scanner/scripts/render_scan_packet.py",
      "kind": "support",
      "size_bytes": 841,
      "sha256": "32ba72e55e9775d7c32e315fb9f74bd17007dc317b3ec1c815ffe6e08ec4ebdf"
    }
  ],
  "archives": [
    {
      "format": "zip",
      "path": "dist/archives/vulnerability-scanner.zip",
      "file_name": "vulnerability-scanner.zip",
      "size_bytes": 15455,
      "sha256": "ec813e73b90e06237f0c8a404112551c68457ff5e9a01fd0fb8b378f31e1ec22",
      "signature": {
        "status": "signed",
        "path": "dist/archives/vulnerability-scanner.zip.sig",
        "sha256": "f024b3be16b84879be08fe3717b023118f8e2c7d0ce3c03bbe2c385d963da49e",
        "public_key_path": "dist/signing/omni-skills-public.pem",
        "algorithm": "sha256",
        "verify_command": "openssl dgst -sha256 -verify dist/signing/omni-skills-public.pem -signature dist/archives/vulnerability-scanner.zip.sig dist/archives/vulnerability-scanner.zip"
      }
    },
    {
      "format": "tar.gz",
      "path": "dist/archives/vulnerability-scanner.tar.gz",
      "file_name": "vulnerability-scanner.tar.gz",
      "size_bytes": 30743,
      "sha256": "f7ac8a089946339d0e34828b816d3196573ea7219f6b8bb52ab5e380bc549bf7",
      "signature": {
        "status": "signed",
        "path": "dist/archives/vulnerability-scanner.tar.gz.sig",
        "sha256": "5033bc94313ca6c9536e7e92bf600646c8db90eb59158529676844797cb7e0b2",
        "public_key_path": "dist/signing/omni-skills-public.pem",
        "algorithm": "sha256",
        "verify_command": "openssl dgst -sha256 -verify dist/signing/omni-skills-public.pem -signature dist/archives/vulnerability-scanner.tar.gz.sig dist/archives/vulnerability-scanner.tar.gz"
      }
    }
  ],
  "archive_checksums": {
    "path": "dist/archives/vulnerability-scanner.checksums.txt",
    "file_name": "vulnerability-scanner.checksums.txt",
    "sha256": "7815d6ea797f538d308890ca035d90be436e91306e15ad271e092e9e87049061",
    "signature": {
      "status": "signed",
      "path": "dist/archives/vulnerability-scanner.checksums.txt.sig",
      "sha256": "5807a5c46d90f9ed4e7d8060dbe768551f4a25cd0e2ae41429eed24e885f9e95",
      "public_key_path": "dist/signing/omni-skills-public.pem",
      "algorithm": "sha256",
      "verify_command": "openssl dgst -sha256 -verify dist/signing/omni-skills-public.pem -signature dist/archives/vulnerability-scanner.checksums.txt.sig dist/archives/vulnerability-scanner.checksums.txt"
    }
  },
  "checksums": {
    "entrypoint_sha256": "5f10ad123762087117fe82606041d508c1e6fdee802ab6c5fec0463543c96a03",
    "package_sha256": "c6424b2e79ff3e24546d8cdf073423066a38cfaecb38c8d8433f3534cb30139e"
  }
}