Guides for using ai agents skills like sandbase-harness.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 8/15/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@ai-sdk/anthropic: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@ai-sdk/openai: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@ai-sdk/provider-utils: @ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@ai-sdk/react: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@ai-sdk/ui-utils: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@hono/node-server: Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@vitest/mocker: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "ai: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "hono: Hono: ReDoS in CORS middleware via Access-Control-Request-Headers",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "jsondiffpatch: jsondiffpatch is vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "nanoid: nanoid: non-secure generators can loop indefinitely with negative size",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "vite-node: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vitest: Vulnerability found",
      "severity": "critical"
    },
    {
      "file": "README.md",
      "line": 276,
      "type": "secret-exfiltration",
      "message": "Instruction appears to send credentials/secrets to an external endpoint",
      "severity": "medium"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-08-15T04:29:46.532Z",
  "npmAuditRan": true,
  "pipAuditRan": true,
  "promptInjectionRan": true
}