paseo

Guides for using ai agents skills like paseo.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

  First-time install walkthrough for Claude Code, Codex CLI, and ChatGPT.

Last scanned: 4/20/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@cloudflare/vite-plugin: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@expo/config: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@expo/config-plugins: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@expo/plist: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@expo/prebuild-config: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@modelcontextprotocol/sdk: Anthropic's MCP TypeScript SDK has a ReDoS vulnerability",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@tanstack/react-start: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tanstack/react-start-server: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tanstack/start-plugin-core: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tanstack/start-server-core: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@typescript-eslint/eslint-plugin: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@typescript-eslint/parser: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@typescript-eslint/type-utils: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@typescript-eslint/typescript-estree: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@typescript-eslint/utils: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@xmldom/xmldom: xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "ajv: ajv has ReDoS when using `$data` option",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "axios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "body-parser: body-parser is vulnerable to denial of service when url encoding is used",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "eas-cli: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "electron: Electron: Use-after-free in offscreen shared texture release() callback",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "expo-module-scripts: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "flatted: Prototype Pollution via parse() in NodeJS flatted",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "h3: h3 has a Path Traversal via Percent-Encoded Dot Segments in serveStatic Allows Arbitrary File Read",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "hono: Hono missing validation of cookie name on write path in setCookie()",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "http-proxy-agent: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "jest-environment-jsdom: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "jest-expo: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "jsdom: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "lodash: lodash vulnerable to Code Injection via `_.template` imports key names",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "markdown-it: Uncontrolled Resource Consumption in markdown-it",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "miniflare: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "node-forge: node-forge has ASN.1 Unbounded Recursion",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "react-native-markdown-display: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "smol-toml: smol-toml: Denial of Service via TOML documents containing thousands of consecutive commented lines",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "srvx: srvx is vulnerable to middleware bypass via absolute URI in request line ",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "undici: Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "wrangler: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
      "severity": "medium"
    }
  ],
  "status": "WARNING",
  "scannedAt": "2026-04-20T06:16:21.296Z",
  "semgrepRan": false,
  "npmAuditRan": true,
  "pipAuditRan": true
}