Guides for using ai agents skills like natively-cluely-ai-assistant.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 5/1/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@google-cloud/speech: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/after: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/after-each: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/asserts: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/before: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/before-each: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/chdir: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/config: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/core: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/filter: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/fixture: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/intercept: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/mock: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/node-serialize: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/processinfo: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/reporter: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/run: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/snapshot: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/spawn: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/stdin: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/test: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/typescript: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tapjs/worker: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@xenova/transformers: Vulnerability found",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "@xmldom/xmldom: xmldom: Uncontrolled recursion in XML serialization leads to DoS",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "axios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "cacache: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "dompurify: DOMPurify is vulnerable to mutation-XSS via Re-Contextualization ",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "electron: Electron has ASAR Integrity Bypass via resource modification",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "electron-rebuild: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "hono: Hono missing validation of cookie name on write path in setCookie()",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "http-proxy-agent: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "jspdf: jsPDF has a PDF Object Injection via FreeText color",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "lodash: lodash vulnerable to Code Injection via `_.template` imports key names",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "make-fetch-happen: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "node-gyp: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "onnx-proto: Vulnerability found",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "onnxruntime-web: Vulnerability found",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "prismjs: PrismJS DOM Clobbering vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "protobufjs: Arbitrary code execution in protobufjs",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "react-code-blocks: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "react-syntax-highlighter: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "refractor: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "sqlite3: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "styled-components: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "tap: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "teeny-request: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
      "severity": "medium"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-05-01T06:39:45.120Z",
  "semgrepRan": false,
  "npmAuditRan": true,
  "pipAuditRan": true
}