[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6KKKENPSCEHGGA14Z8Q09VT":3,"skill-same:01M6KKKENPSCEHGGA14Z8Q09VT":67},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":40,"linkOnly":41,"markdownContent":42,"markdownBody":43,"frontMatter":44,"refName":45,"commitSha":46,"skillDirectory":47,"forksCount":48,"repositoryHtmlUrl":49,"repositoryHomepageUrl":50,"ownerHtmlUrl":51,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":52,"install":53,"resources":66},"01M6KKKENPSCEHGGA14Z8Q09VT","dependency-vulnerability-audit",null,"How to perform security audits on package-lock.json. Use this skill whenever you need to identify HIGH or CRITICAL vulnerabilities in project dependencies.","cxcscmu\u002FSkillLearnBench","cxcscmu","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F142838272?v=4","01M6KCQDFQWPDSN0MKZY96MSQP","01M6KCQDM7G70TKJ28NTSQC0RZ",93,"MIT","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fb4-skill-creator-gemini-3.1-flash-lite-preview\u002Fdependency-vulnerability-check\u002Fdependency-vulnerability-audit\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39],"dependency","dependency vulnerability audit","vulnerability","audit","package","how","json","use","security","dependencies","project","critical","how to","you","lock","high","vulnerabilities","2026-11-10 10:12:30",false,"---\nname: dependency-vulnerability-audit\ndescription: How to perform security audits on package-lock.json. Use this skill whenever you need to identify HIGH or CRITICAL vulnerabilities in project dependencies.\n---\n\n# Dependency Vulnerability Audit\n\nThis skill outlines the process for auditing `package-lock.json` for security vulnerabilities.\n\n## Audit Workflow\n\n1. **Scan**: Use `trivy` in offline mode to scan `package-lock.json`.\n   - Ensure the Trivy DB is present at `\u002Froot\u002F.cache\u002Ftrivy\u002Fdb\u002Ftrivy.db`.\n   - Execute: `trivy fs --db-repository \u002Froot\u002F.cache\u002Ftrivy\u002Fdb --offline-scan --format json package-lock.json > scan_results.json`\n2. **Filter**: Parse the `scan_results.json` to filter for vulnerabilities with `Severity` of `HIGH` or `CRITICAL`.\n3. **Data Extraction**: Extract the following fields:\n   - Package Name\n   - Installed Version\n   - CVE ID\n   - Severity Level\n   - CVSS Score\n   - Fixed Version (if available)\n   - Title\n   - Reference URL\n4. **Validation**: Verify the extracted information against NVD\u002FGHSA if necessary using `cvss-score-extraction` skill.\n","# Dependency Vulnerability Audit\n\nThis skill outlines the process for auditing `package-lock.json` for security vulnerabilities.\n\n## Audit Workflow\n\n1. **Scan**: Use `trivy` in offline mode to scan `package-lock.json`.\n   - Ensure the Trivy DB is present at `\u002Froot\u002F.cache\u002Ftrivy\u002Fdb\u002Ftrivy.db`.\n   - Execute: `trivy fs --db-repository \u002Froot\u002F.cache\u002Ftrivy\u002Fdb --offline-scan --format json package-lock.json > scan_results.json`\n2. **Filter**: Parse the `scan_results.json` to filter for vulnerabilities with `Severity` of `HIGH` or `CRITICAL`.\n3. **Data Extraction**: Extract the following fields:\n   - Package Name\n   - Installed Version\n   - CVE ID\n   - Severity Level\n   - CVSS Score\n   - Fixed Version (if available)\n   - Title\n   - Reference URL\n4. **Validation**: Verify the extracted information against NVD\u002FGHSA if necessary using `cvss-score-extraction` skill.\n",{"name":5,"description":7},"main","726e1f79b96b0cb3d729d0e55a1c847e0b5353ae","skills\u002Fb4-skill-creator-gemini-3.1-flash-lite-preview\u002Fdependency-vulnerability-check\u002Fdependency-vulnerability-audit",7,"https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench","https:\u002F\u002Fcxcscmu.github.io\u002FSkillLearnBench","https:\u002F\u002Fgithub.com\u002Fcxcscmu","2026-10-02 22:55:36",{"source":8,"skillName":5,"commands":54,"prompt":64,"zipAvailable":65},[55,58,61],{"tool":56,"command":57},"npx","npx skills add cxcscmu\u002FSkillLearnBench --skill dependency-vulnerability-audit",{"tool":59,"command":60},"bunx","bunx skills add cxcscmu\u002FSkillLearnBench --skill dependency-vulnerability-audit",{"tool":62,"command":63},"pnpm","pnpm dlx skills add cxcscmu\u002FSkillLearnBench --skill dependency-vulnerability-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fb4-skill-creator-gemini-3.1-flash-lite-preview\u002Fdependency-vulnerability-check\u002Fdependency-vulnerability-audit\u002FSKILL.md",true,[],[68,84,107,124,143,155],{"skillNo":69,"name":70,"nameZh":6,"description":71,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":72,"categories":73,"keywords":77,"publishedAt":40},"01M6KM5KH175P5ABP5JMX2SBDQ","object_counter","Count occurrences of an object in the image using computer vision algorithm.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Fvideo-object-counting\u002Fobject_counter\u002FSKILL.md",[74],{"categoryNo":75,"categoryName":76,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000016","图像与多媒体",[78,79,80,81,82,83],"object counter","object","vision","computer","Computer Vision","image",{"skillNo":85,"name":86,"nameZh":6,"description":87,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":88,"categories":89,"keywords":91,"publishedAt":40},"01M6KM51TMVXG79MMPCS6Y8G86","travel-planning-workflow","Invoke this skill when performing travel planning. It defines a structured workflow for generating itineraries. Following this workflow is essential to ensure the final plan satisfies user requirements.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftravel-planning\u002Ftravel-planning-workflow\u002FSKILL.md",[90],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},[92,93,94,95,96,97,98,99,100,101,102,103,104,105,106],"workflow","planning","planning workflow","travel","travel planning","travel planning workflow","structured","performing","plan","for","user","it","requirements","essential","itineraries",{"skillNo":108,"name":109,"nameZh":6,"description":110,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":111,"categories":112,"keywords":113,"publishedAt":40},"01M6KM4DY820XHS9YTSK5QP5HD","bundled-dataset-search-tool","invoke this skill when you need to perform database search for travel planning. This skill provides some useful pre-packaged tools to look up accommodations, attractions, cities, driving distance, flights, and restaurants from the bundled dataset.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftravel-planning\u002Fbundled-dataset-search-tool\u002FSKILL.md",[],[114,115,116,117,118,119,120,95,121,122,96,36,101,123,93],"search","tool","dataset","bundled dataset search tool","restaurants","Tools","up","look","flights","database",{"skillNo":125,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":128,"categories":129,"keywords":130,"publishedAt":40},"01M6KM465BB9PQ0B548HQSVAWZ","glm-output","Output-processing guidance for GLM tasks. Especially useful after glm-basics and glm-calibration when you need verifier-matching metrics from output.nc and a final \u002Froot\u002Fmetrics.json.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftemperature-simulation\u002Fglm-output\u002FSKILL.md",[],[131,132,133,101,134,135,29,136,137,138,139,140,36,141,142],"glm output","output","glm","tasks","metrics","basics","guidance","matching","verifier","processing","root","calibration",{"skillNo":144,"name":145,"nameZh":6,"description":146,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":147,"categories":148,"keywords":150,"publishedAt":40},"01M6KM40KY3QWDW5W97S39R2BC","glm-calibration","Calibration guidance for GLM tasks. Often most effective after glm-basics has clarified the setup; glm-output is the companion skill for exact final metric computation.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftemperature-simulation\u002Fglm-calibration\u002FSKILL.md",[149],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},[151,142,133,132,137,136,134,152,153,101,154],"glm calibration","setup","companion","metric",{"skillNo":156,"name":157,"nameZh":6,"description":158,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":159,"categories":160,"keywords":161,"publishedAt":40},"01M6KM3VHHVSGMGHJQB3PPT6YG","glm-basics","A good starting point for GLM calibration tasks. Use to inspect glm3.nml, confirm how GLM runs, and identify the relevant files before moving on to calibration and output evaluation.","https:\u002F\u002Fgithub.com\u002Fcxcscmu\u002FSkillLearnBench\u002Fblob\u002Fmain\u002Fskills\u002Fhuman_authored\u002Ftemperature-simulation\u002Fglm-basics\u002FSKILL.md",[],[162,133,136,163,151,142,101,132,164,165,166,30,28,167,134],"glm basics","inspect","relevant","files","good","Evaluation"]