Agent skills and AI integrations for VulnCheck — query vulnerability and exploit intelligence directly inside your AI coding assistant.
- CVE lookups: Ask about a CVE and get enriched data — severity, exploitability, affected versions, and active exploitation status
- Package vulnerabilities: Check any package by PURL (npm, pypi, maven, cargo, golang, nuget, and more) for known vulnerabilities
- Exploit intelligence: Find exploit code, PoCs, and detection rules for CVEs with active exploitation
- Index queries: Query any of VulnCheck's 490+ indices — advisories, KEV lists, botnet data, IP intelligence, and more
- Project scanning: Scan a local project directory for vulnerable dependencies
- Backup downloads: Get signed download URLs for full index backups
- The VulnCheck CLI installed and authenticated (
vulncheck auth login) - Claude Code
- On Windows, WSL or Git Bash is required for Claude shell access
Step 1 — Add via the Claude Code marketplace (one time):
/plugin marketplace add vulncheck-oss/agent-tools
Step 2 — Install the skill:
/plugin install vulncheck-cli@vulncheck-oss
Install persists across sessions. No action needed per session.
Start a fresh Claude Code session and ask:
what does your vulncheck-cli skill say?
A working install responds with a summary of the skill's capabilities. If Claude says the skill is unavailable, re-check your installation — ensure the marketplace is registered and the skill is enabled in /plugin.
For example prompts and expected behavior, see skills/vulncheck-cli/tests/prompts.md.
| Skill | Description | Status |
|---|---|---|
vulncheck-cli |
Query vulnerability intelligence via the VulnCheck CLI | Available |
See CONTRIBUTING.md.