Scan any public GitHub repository for known vulnerabilities in seconds. Free, no signup.
Results in 5-10 seconds. No clone, no install, no signup.
Dependency vulnerabilities checked against Google's OSV database (npm + PyPI).
Drop a status badge into your README — keeps your repo's security posture visible.
package.json and requirements.txt from the default branch.This instant check queries the OSV database for known CVEs in your declared dependencies. It is a quick public snapshot and does not change a skill's security status in the SkillsLLM catalog.
The catalog scan is separate and deeper: when you submit a repo, it is cloned and audited with npm audit + pip-audit against the full locked dependency tree. That result sets the skill's official security badge and unlocks featuring. The two engines can return different verdicts by design.