Guides for using ai agents skills like LearnPrompt.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 5/19/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@babel/helpers: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/plugin-transform-modules-systemjs: @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/runtime-corejs3: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@babel/traverse: Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/core: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/lqip-loader: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/mdx-loader: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-client-redirects: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-content-blog: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-content-docs: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-content-pages: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-debug: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-google-analytics: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-google-gtag: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-google-tag-manager: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-ideal-image: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/plugin-sitemap: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/preset-classic: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/theme-classic: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/theme-common: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/theme-mermaid: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@docusaurus/theme-search-algolia: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@mdx-js/mdx: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "ajv: ajv has ReDoS when using `$data` option",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "axios: Axios Cross-Site Request Forgery Vulnerability",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "body-parser: body-parser vulnerable to denial of service when url encoding is enabled",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "braces: Uncontrolled resource consumption in braces",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "compression: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "cookie: cookie accepts cookie name, path, and domain with out of bounds characters",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "copy-webpack-plugin: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "cross-spawn: Regular Expression Denial of Service (ReDoS) in cross-spawn",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "css-minimizer-webpack-plugin: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "dompurify: DOMPurify allows tampering by prototype pollution",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "express: express vulnerable to XSS via response.redirect()",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "follow-redirects: follow-redirects' Proxy-Authorization header kept across hosts",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "got: Got allows a redirect to a UNIX socket",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "http-proxy-middleware: Denial of service in http-proxy-middleware",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "immutable: Immutable is vulnerable to Prototype Pollution",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "katex: KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "latest-version: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "lodash-es: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "mermaid: Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "micromatch: Regular Expression Denial of Service (ReDoS) in micromatch",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "nanoid: Predictable results in nanoid generation when given non-integer values",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "node-forge: node-forge has ASN.1 Unbounded Recursion",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "on-headers: on-headers is vulnerable to http response header manipulation",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "package-json: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "path-to-regexp: path-to-regexp outputs backtracking regular expressions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "prismjs: PrismJS DOM Clobbering vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "rehype-katex: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "remark-mdx: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "remark-parse: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "semver: semver vulnerable to Regular Expression Denial of Service",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "send: send vulnerable to template injection that can lead to XSS",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "serve-handler: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "serve-static: serve-static vulnerable to template injection that can lead to XSS",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "sharp: sharp vulnerability in libwebp dependency CVE-2023-4863",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "svgo: SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tar-fs: tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "terser-webpack-plugin: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "trim: Regular Expression Denial of Service in trim",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "update-notifier: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "wait-on: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "webpack: Cross-realm object access in Webpack 5",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "webpack-dev-middleware: Path traversal in webpack-dev-middleware",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "webpack-dev-server: webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ws: ws affected by a DoS when handling a request with many HTTP headers",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
      "severity": "medium"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-05-19T07:45:20.377Z",
  "semgrepRan": false,
  "npmAuditRan": true,
  "pipAuditRan": true
}