Install payload
Install payload is broadly covered in current results.
100% (4/4)
Browse the directory
/
Showing 4 resources for "osv"
Saved
/ search · [ ] view density · esc clear input
Active
Source-backed filter active — add entries to compare trust side by side.
Trust snapshot
4 results in this view
Claimed
0%(0/4)
1 trust signal differs in this sample: Submitter
Signals differ on Submitter — add entries to compare before you install.
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
good
Adoption queue
Browse adoption queue · balanced
0/4 visible results are ready for staged adoption under this preset.
ready 0caution 4hold 0
/dependency-risk-review - Dependency Risk Review Command for Claude Code
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
commands/dependency-risk-review · trust review · confidence 67%
CVE MCP Server
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/cve-mcp-server · trust review · confidence 67%
NVIDIA SkillSpector
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
tools/nvidia-skillspector · trust review · confidence 67%
OSV Dependency Risk Statusline
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
statuslines/osv-dependency-risk-statusline · trust review · confidence 67%
Decision confidence
Decision confidence scan · balanced
0/4 results are high-confidence for the selected preset.
high 0medium 4low 0
/dependency-risk-review - Dependency Risk Review Command for Claude Code
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
commands/dependency-risk-review · trust review
CVE MCP Server
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
mcp/cve-mcp-server · trust review
NVIDIA SkillSpector
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
tools/nvidia-skillspector · trust review
OSV Dependency Risk Statusline
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
statuslines/osv-dependency-risk-statusline · trust review
Freshness distribution
Current results are broadly fresh
Median age 53 days; all 4 scanned entries are within 90 days.
Theme distribution
Results center on security
100% of this view shares the top theme. Leading themes: security, dependencies, osv.
- security100% (4)
- dependencies50% (2)
- osv50% (2)
- agent-skills25% (1)
- claude-code25% (1)
- cve25% (1)
- devops25% (1)
- incident-response25% (1)
17 distinct themes across 4 scanned
Claude Code statusline that reads OSV-Scanner JSON results and prints a compact dependency vulnerability count for review sessions.
Apache-2.0 security scanner from NVIDIA for AI agent skills, with static pattern checks, optional LLM semantic analysis, MCP least-privilege and tool poisoning analyzers, OSV.dev vulnerability lookups, risk scoring, and terminal, JSON, Markdown, and SARIF reports.
Slash command that reviews the supply-chain risk of a project's dependencies using OpenSSF Scorecard health signals rather than CVE counts.
CVE MCP Serverby Mahipal Jangra · submitted by oktofeesh1
Security intelligence MCP server that lets Claude look up CVEs, EPSS scores, CISA KEV status, OSV package vulnerabilities, exploit indicators, MITRE mappings, IP reputation, passive DNS, Shodan host data, malware intelligence, URL safety, and risk reports across optional third-party APIs.