deep-student

Guides for using ai agents skills like deep-student.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 10/5/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@boundaries/elements: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@hono/node-server: Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@vitest/mocker: Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "baseline-browser-mapping: baseline-browser-mapping process termination on invalid input causes denial of service",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "body-parser: body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "braces: braces vulnerable to stack-exhaustion denial of service through deeply nested patterns",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "browserslist: Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "chokidar: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "colord: Colord: Slow rejection of oversized malformed color strings",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "dompurify: DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "eslint-plugin-boundaries: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "fast-glob: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "fast-uri: fast-uri vulnerable to host confusion via literal backslash authority delimiter",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "find-yarn-workspace-root: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "globby: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "hono: Hono: ReDoS in CORS middleware via Access-Control-Request-Headers",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ip-address: ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "mermaid: Mermaid configuration APIs allow prototype pollution",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "micromatch: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "nanoid: nanoid: non-secure generators can loop indefinitely with negative size",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "patch-package: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "postcss-selector-parser: postcss-selector-parser allows denial of service through uncontrolled AST recursion",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "qs: qs array-limit bypass via bracket-key comma parsing",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "sharp: sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "stylelint: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tailwindcss: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "vite-plugin-static-copy: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "vitest: Vulnerability found",
      "severity": "medium"
    }
  ],
  "status": "WARNING",
  "scannedAt": "2026-10-05T11:12:48.426Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}