[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6G03BY08GG6ATX9T23PQJHW":3,"skill-same:01M6G03BY08GG6ATX9T23PQJHW":62},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":33,"linkOnly":34,"markdownContent":35,"markdownBody":36,"frontMatter":37,"refName":38,"commitSha":39,"skillDirectory":40,"forksCount":41,"repositoryHtmlUrl":42,"repositoryHomepageUrl":43,"ownerHtmlUrl":44,"ownerBlogUrl":45,"ownerDescription":46,"updatedAt":47,"install":48,"resources":61},"01M6G03BY08GG6ATX9T23PQJHW","osv-scanner",null,"Use this skill when the user wants to scan project dependencies, lockfiles, or container images for known vulnerabilities using Google's OSV.dev database.","javimosch\u002Fsupercli","javimosch","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F12900508?v=4","01M6D3F2AS6PV75ET9PZ1QGP8J","Javier Leandro Arancibia","01M6D3F2EBNWNJ358Q90P5YQR1",57,"MIT","https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fplugins\u002Fosv-scanner\u002Fskills\u002Fquickstart\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32],"scanner","osv scanner","google","vulnerabilities","container images","dev","database","user","use","container","images","scan","dependencies","project","2026-11-10 10:12:30",false,"---\nname: osv-scanner\ndescription: Use this skill when the user wants to scan project dependencies, lockfiles, or container images for known vulnerabilities using Google's OSV.dev database.\n---\n\n# OSV-Scanner Plugin\n\nOSV-Scanner is Google's official CLI for the OSV.dev vulnerability database. It maps a project's dependencies to known vulnerabilities across 11+ ecosystems (npm, pip, Go modules, cargo, maven, gem, composer, nuget, ...) and scans container images layer-aware. No API key needed.\n\n## Commands\n\n### Scanning\n- `osv-scanner scan source` — Scan a source directory (`-r` recursive, `-L \u003Clockfile>` for one file)\n- `osv-scanner scan image` — Scan a container image for OS + language package vulns\n- `osv-scanner licenses check` — Check dependency licenses against an allowlist\n- `osv-scanner fix run` — Guided remediation: suggests version upgrades (experimental, npm\u002FMaven)\n- `osv-scanner self version` — Print version\n- `osv-scanner _ _` — Passthrough to osv-scanner CLI\n\n## Usage Examples\n\n- \"Scan this project for vulnerable dependencies\"\n- \"Check this container image for CVEs\"\n- \"Audit dependency licenses, only allow MIT\u002FApache-2.0\"\n- \"Give me scan results as JSON\u002FSARIF for CI\"\n- \"Suggest upgrades to fix the vulnerabilities\"\n\n## Installation\n\n```bash\ncurl -sSL https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fosv-scanner\u002Freleases\u002Flatest\u002Fdownload\u002Fosv-scanner_linux_amd64 \\\n  -o ~\u002F.local\u002Fbin\u002Fosv-scanner && chmod +x ~\u002F.local\u002Fbin\u002Fosv-scanner\n# or: go install github.com\u002Fgoogle\u002Fosv-scanner\u002Fv2\u002Fcmd\u002Fosv-scanner@latest\n```\n\n## Examples\n\n```bash\n# Recursive scan, JSON for pipelines\nosv-scanner scan source -r . --format json\n\n# Scan a single lockfile\nosv-scanner scan source -L package-lock.json\n\n# SARIF output for GitHub code scanning\nosv-scanner scan source -r . --format sarif -o results.sarif\n\n# License audit\nosv-scanner --licenses=MIT,Apache-2.0 .\n\n# Air-gapped scan\nosv-scanner --offline --download-offline-databases -r .\n```\n\n## Key Features\n\n- 11+ language ecosystems, 19+ lockfile types, C\u002FC++ vendored-code detection\n- Layer-aware container image scanning (Alpine, Debian, Ubuntu + Go\u002FJava\u002FNode\u002FPython artifacts)\n- Call analysis reduces false positives (checks if vulnerable function is actually used)\n- Output: table, JSON, SARIF, CycloneDX, markdown\n- `--offline` mode scans against a local OSV database (no network)\n- Queries osv.dev API with no API key required\n","# OSV-Scanner Plugin\n\nOSV-Scanner is Google's official CLI for the OSV.dev vulnerability database. It maps a project's dependencies to known vulnerabilities across 11+ ecosystems (npm, pip, Go modules, cargo, maven, gem, composer, nuget, ...) and scans container images layer-aware. No API key needed.\n\n## Commands\n\n### Scanning\n- `osv-scanner scan source` — Scan a source directory (`-r` recursive, `-L \u003Clockfile>` for one file)\n- `osv-scanner scan image` — Scan a container image for OS + language package vulns\n- `osv-scanner licenses check` — Check dependency licenses against an allowlist\n- `osv-scanner fix run` — Guided remediation: suggests version upgrades (experimental, npm\u002FMaven)\n- `osv-scanner self version` — Print version\n- `osv-scanner _ _` — Passthrough to osv-scanner CLI\n\n## Usage Examples\n\n- \"Scan this project for vulnerable dependencies\"\n- \"Check this container image for CVEs\"\n- \"Audit dependency licenses, only allow MIT\u002FApache-2.0\"\n- \"Give me scan results as JSON\u002FSARIF for CI\"\n- \"Suggest upgrades to fix the vulnerabilities\"\n\n## Installation\n\n```bash\ncurl -sSL https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fosv-scanner\u002Freleases\u002Flatest\u002Fdownload\u002Fosv-scanner_linux_amd64 \\\n  -o ~\u002F.local\u002Fbin\u002Fosv-scanner && chmod +x ~\u002F.local\u002Fbin\u002Fosv-scanner\n# or: go install github.com\u002Fgoogle\u002Fosv-scanner\u002Fv2\u002Fcmd\u002Fosv-scanner@latest\n```\n\n## Examples\n\n```bash\n# Recursive scan, JSON for pipelines\nosv-scanner scan source -r . --format json\n\n# Scan a single lockfile\nosv-scanner scan source -L package-lock.json\n\n# SARIF output for GitHub code scanning\nosv-scanner scan source -r . --format sarif -o results.sarif\n\n# License audit\nosv-scanner --licenses=MIT,Apache-2.0 .\n\n# Air-gapped scan\nosv-scanner --offline --download-offline-databases -r .\n```\n\n## Key Features\n\n- 11+ language ecosystems, 19+ lockfile types, C\u002FC++ vendored-code detection\n- Layer-aware container image scanning (Alpine, Debian, Ubuntu + Go\u002FJava\u002FNode\u002FPython artifacts)\n- Call analysis reduces false positives (checks if vulnerable function is actually used)\n- Output: table, JSON, SARIF, CycloneDX, markdown\n- `--offline` mode scans against a local OSV database (no network)\n- Queries osv.dev API with no API key required\n",{"name":5,"description":7},"master","18c32f4b7197d246bdedcc9eca5d0403eaac0bc2","plugins\u002Fosv-scanner\u002Fskills\u002Fquickstart",5,"https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli","https:\u002F\u002Fjavimosch.github.io\u002Fsupercli\u002F","https:\u002F\u002Fgithub.com\u002Fjavimosch","intrane.fr","Building robust, open-source infrastructure for the commons. AI-leveraged, self-hosted, built to last.","2026-11-02 18:24:17",{"source":8,"skillName":5,"commands":49,"prompt":59,"zipAvailable":60},[50,53,56],{"tool":51,"command":52},"npx","npx skills add javimosch\u002Fsupercli --skill osv-scanner",{"tool":54,"command":55},"bunx","bunx skills add javimosch\u002Fsupercli --skill osv-scanner",{"tool":57,"command":58},"pnpm","pnpm dlx skills add javimosch\u002Fsupercli --skill osv-scanner","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fplugins\u002Fosv-scanner\u002Fskills\u002Fquickstart\u002FSKILL.md",true,[],[63,76,96,108,120,128],{"skillNo":64,"name":65,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":66,"categories":67,"keywords":73,"publishedAt":33},"01M6G7YFZVHRYAY51J0YG9SDNJ","sc-machin-mcp","https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fsupercli-machin-cli\u002Fskills\u002Fsc-machin-mcp\u002FSKILL.md",[68],{"categoryNo":69,"categoryName":70,"taxonomyType":71,"taxonomyTypeDesc":72},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[74,75],"sc machin mcp","MCP",{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":83,"publishedAt":33},"01M6G7YB179MQMSHZBJDC8TZA8","supercli.quickstart","SuperCLI capability router — discover and execute CLI commands through namespace.resource.action interface","https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fskills\u002Fsupercli\u002FSKILL.md",[82],{"categoryNo":69,"categoryName":70,"taxonomyType":71,"taxonomyTypeDesc":72},[84,85,86,87,88,89,90,91,92,93,94,95],"supercli quickstart","quickstart","cli","capability router","plugin","discovery","execute","router","discover","commands","interface","supercli,cli,plugin,capability,discovery,agent",{"skillNo":97,"name":98,"nameZh":6,"description":99,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":100,"categories":101,"keywords":102,"publishedAt":33},"01M6G7Y734QS3793YMS5PR146J","zzdoc","Use this skill to compile scdoc manpages with a fast Zig-based compiler.","https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fplugins\u002Fzzdoc\u002Fskills\u002Fquickstart\u002FSKILL.md",[],[98,103,27,104,105,106,107],"with","zig","fast","compiler","compile",{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":112,"categories":113,"keywords":114,"publishedAt":33},"01M6G7Y2WX56K2QJQ9RV2ZKEV7","zx","Use this skill when the user wants to a tool for writing better scripts using node.js.","https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fplugins\u002Fzx\u002Fskills\u002Fquickstart\u002FSKILL.md",[],[110,115,27,26,116,117,118,119],"scripts","node","tool","js","writing",{"skillNo":121,"name":122,"nameZh":6,"description":123,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":124,"categories":125,"keywords":126,"publishedAt":33},"01M6G7Y0M792DGW31HN4TEQT10","zvm","Use this skill when the user wants to manage multiple Zig compiler versions.","https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fplugins\u002Fzvm\u002Fskills\u002Fquickstart\u002FSKILL.md",[],[122,104,127,27,26,106],"manage",{"skillNo":129,"name":85,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":130,"categories":131,"keywords":132,"publishedAt":33},"01M6G7XX51W5HJW09DYXBK92TJ","https:\u002F\u002Fgithub.com\u002Fjavimosch\u002Fsupercli\u002Fblob\u002Fmaster\u002Fplugins\u002Fzstdmt\u002Fskills\u002Fquickstart\u002FSKILL.md",[],[85]]