Install payload
Install payload is broadly covered in current results.
100% (5/5)
Browse the directory
/
Showing 5 resources for "osv"
Saved
/ search · [ ] view density · esc clear input
Active
Privacy notes filter active — add entries to compare trust side by side.
Trust snapshot
5 results in this view
Claimed
0%(0/5)
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Most at-risk entries in this view
- 67%
OSV Dependency Risk Statusline
No required rollout gaps
- 67%
NVIDIA SkillSpector
No required rollout gaps
- 67%
/dependency-risk-review - Dependency Risk Review Command for Claude Code
No required rollout gaps
- 67%
Dependency Update Triage Agent
No required rollout gaps
- 67%
CVE MCP Server
No required rollout gaps
Adoption queue
Browse adoption queue · balanced
0/5 visible results are ready for staged adoption under this preset.
ready 0caution 5hold 0
/dependency-risk-review - Dependency Risk Review Command for Claude Code
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/dependency-risk-review · trust review · confidence 67%
CVE MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/cve-mcp-server · trust review · confidence 67%
Dependency Update Triage Agent
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/dependency-update-triage-agent · trust review · confidence 67%
NVIDIA SkillSpector
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
tools/nvidia-skillspector · trust review · confidence 67%
OSV Dependency Risk Statusline
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
statuslines/osv-dependency-risk-statusline · trust review · confidence 67%
Decision confidence
Decision confidence scan · balanced
0/5 results are high-confidence for the selected preset.
high 0medium 5low 0
/dependency-risk-review - Dependency Risk Review Command for Claude Code
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
commands/dependency-risk-review · trust review
CVE MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/cve-mcp-server · trust review
Dependency Update Triage Agent
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
agents/dependency-update-triage-agent · trust review
NVIDIA SkillSpector
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
tools/nvidia-skillspector · trust review
OSV Dependency Risk Statusline
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
statuslines/osv-dependency-risk-statusline · trust review
Freshness distribution
Current results are broadly fresh
Median age 53 days; all 5 scanned entries are within 90 days.
Theme distribution
Results center on security
80% of this view shares the top theme. Leading themes: security, dependencies, osv.
- security80% (4)
- dependencies60% (3)
- osv60% (3)
- openssf-scorecard40% (2)
- supply-chain40% (2)
- agent-skills20% (1)
- claude-code20% (1)
- cve20% (1)
18 distinct themes across 5 scanned
Claude Code statusline that reads OSV-Scanner JSON results and prints a compact dependency vulnerability count for review sessions.
Apache-2.0 security scanner from NVIDIA for AI agent skills, with static pattern checks, optional LLM semantic analysis, MCP least-privilege and tool poisoning analyzers, OSV.dev vulnerability lookups, risk scoring, and terminal, JSON, Markdown, and SARIF reports.
Slash command that reviews the supply-chain risk of a project's dependencies using OpenSSF Scorecard health signals rather than CVE counts.
Source-backed agent for triaging dependency update pull requests with SemVer risk, Dependabot context, GitHub dependency review, OSV advisories, OpenSSF Scorecard signals, lockfile changes, test evidence, and privacy-safe notes.
CVE MCP Serverby Mahipal Jangra · submitted by oktofeesh1
Security intelligence MCP server that lets Claude look up CVEs, EPSS scores, CISA KEV status, OSV package vulnerabilities, exploit indicators, MITRE mappings, IP reputation, passive DNS, Shodan host data, malware intelligence, URL safety, and risk reports across optional third-party APIs.