ai-guide

Guides for using ai agents skills like ai-guide.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 9/1/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@babel/core: @babel/core: Arbitrary File Read via sourceMappingURL Comment",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@babel/helpers: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/plugin-transform-modules-systemjs: @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@types/markdown-it: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@types/webpack-dev-server: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@vue/component-compiler-utils: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@vuepress/core: Vulnerability found",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "@vuepress/markdown: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@vuepress/markdown-loader: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@vuepress/plugin-register-components: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@vuepress/shared-utils: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ajv: ajv has ReDoS when using `$data` option",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "anymatch: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "autoprefixer: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "bn.js: bn.js affected by an infinite loop",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "body-parser: body-parser vulnerable to denial of service when url encoding is enabled",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "bonjour: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "braces: Uncontrolled resource consumption in braces",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "browserify-sign: browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "cache-loader: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "chokidar: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "cipher-base: cipher-base is missing type checks, leading to hash rewind and passing on crafted data",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "compression: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "cookie: cookie accepts cookie name, path, and domain with out of bounds characters",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "copy-webpack-plugin: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "cross-spawn: Regular Expression Denial of Service (ReDoS) in cross-spawn",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "css: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "css-declaration-sorter: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "css-loader: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "css-select: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "cssnano: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "cssnano-preset-default: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "cssnano-util-raw-cache: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "decode-uri-component: decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "dns-packet: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "docsearch.js: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "elliptic: Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "express: express vulnerable to XSS via response.redirect()",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "fast-glob: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "file-loader: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "follow-redirects: follow-redirects' Proxy-Authorization header kept across hosts",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "form-data: form-data uses unsafe random function in form-data for choosing boundary",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "globby: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "got: Got allows a redirect to a UNIX socket",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "highlight.js: ReDOS vulnerabities: multiple grammars",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "html-minifier: kangax html-minifier REDoS vulnerability",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "http-proxy-middleware: Denial of service in http-proxy-middleware",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "icss-utils: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ip: ip SSRF improper categorization in isPublic",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "json5: Prototype Pollution in JSON5 via Parse Method",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "latest-version: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "linkify-it: LinkifyIt#match scan loop has quadratic algorithmic complexity",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "loader-utils: Prototype pollution in webpack loader-utils",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "lodash: lodash vulnerable to Code Injection via `_.template` imports key names",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "lodash.template: Command Injection in lodash",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "lodash.trimend: Regular Expression Denial of Service (ReDoS) in lodash",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "markdown-it: Uncontrolled Resource Consumption in markdown-it",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "micromatch: Regular Expression Denial of Service (ReDoS) in micromatch",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "min-document: min-document vulnerable to prototype pollution",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "mini-css-extract-plugin: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "multicast-dns: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "nanoid: Predictable results in nanoid generation when given non-integer values",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "node-forge: Prototype Pollution in node-forge debug API.",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "normalize-url: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "nth-check: Inefficient Regular Expression Complexity in nth-check",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "on-headers: on-headers is vulnerable to http response header manipulation",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "optimize-css-assets-webpack-plugin: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "package-json: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "path-to-regexp: path-to-regexp outputs backtracking regular expressions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "pbkdf2: pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS line return parsing error",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss-calc: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-colormin: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-convert-values: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-discard-comments: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-discard-duplicates: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-discard-empty: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-discard-overridden: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-loader: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-merge-longhand: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-merge-rules: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-minify-font-values: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-minify-gradients: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-minify-params: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-minify-selectors: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-modules-extract-imports: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-modules-local-by-default: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-modules-scope: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-modules-values: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-charset: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-display-values: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-positions: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-repeat-style: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-string: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-timing-functions: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-unicode: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-url: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-normalize-whitespace: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-ordered-values: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-reduce-initial: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-reduce-transforms: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-safe-parser: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-svgo: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss-unique-selectors: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "prismjs: PrismJS DOM Clobbering vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "query-string: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "readdirp: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "request: Server-Side Request Forgery in Request",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "selfsigned: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "send: send vulnerable to template injection that can lead to XSS",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "serve-static: serve-static vulnerable to template injection that can lead to XSS",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "sha.js: sha.js is missing type checks leading to hash rewind and passing on crafted data",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "sockjs: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "source-map-resolve: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "striptags: Passing in a non-string 'html' argument can lead to unsanitized output",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "stylehacks: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "svgo: SVGO removeScripts plugin leaves some executable scripts intact",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "terser-webpack-plugin: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tough-cookie: tough-cookie Prototype Pollution vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "update-notifier: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vue: ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "vue-loader: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vue-server-renderer: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vue-template-compiler: vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vuepress: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vuepress-html-webpack-plugin: Vulnerability found",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "vuepress-plugin-container: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vuepress-plugin-feed: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "watchpack: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "watchpack-chokidar2: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "webpack: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "webpack-dev-middleware: Path traversal in webpack-dev-middleware",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "webpack-dev-server: webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "webpack-log: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "websocket-driver: websocket-driver: Resource limit bypass via message compression",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "ws: ws affected by a DoS when handling a request with many HTTP headers",
      "severity": "high"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-09-01T09:11:38.358Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}