Scan any public GitHub repository for known vulnerabilities in seconds. Free, no signup.
Results in 5-10 seconds. No clone, no install, no signup.
Dependency vulnerabilities checked against Google's OSV database (npm + PyPI).
Scans SKILL.md, CLAUDE.md and AGENTS.md for override phrases, hidden unicode, and secret-exfiltration patterns.
Drop a status badge into your README — keeps your repo's security posture visible.
package.json and requirements.txt from the default branch.SKILL.md, CLAUDE.md, AGENTS.md) and the README for prompt-injection, hidden instructions, and secret-exfiltration patterns.This instant check queries the OSV database for known CVEs in your declared dependencies. It is a quick public snapshot and does notchange a skill's security status in the SkillsLLM catalog.
The catalog scan is separate and deeper: when you submit a repo, it is cloned and audited with npm audit + pip-auditagainst the full locked dependency tree. That result sets the skill's official security badge and unlocks featuring. The two engines can return different verdicts by design.