vulncheck-cli

VulnCheck Agent Tools

Agent skills and AI integrations for VulnCheck — query vulnerability and exploit intelligence directly inside your AI coding assistant.

Use Cases

• CVE lookups: Ask about a CVE and get enriched data — severity, exploitability, affected versions, and active exploitation status
• Package vulnerabilities: Check any package by PURL (npm, pypi, maven, cargo, golang, nuget, and more) for known vulnerabilities
• Exploit intelligence: Find exploit code, PoCs, and detection rules for CVEs with active exploitation
• Index queries: Query any of VulnCheck's 490+ indices — advisories, KEV lists, botnet data, IP intelligence, and more
• Project scanning: Scan a local project directory for vulnerable dependencies
• Backup downloads: Get signed download URLs for full index backups

Requirements

• The VulnCheck CLI installed and authenticated (vulncheck auth login)
• Claude Code
• On Windows, WSL or Git Bash is required for Claude shell access

Installation

Step 1 — Add via the Claude Code marketplace (one time):

/plugin marketplace add vulncheck-oss/agent-tools

Step 2 — Install the skill:

/plugin install vulncheck-cli@vulncheck-oss

Install persists across sessions. No action needed per session.

Validating the Installation

Start a fresh Claude Code session and ask:

what does your vulncheck-cli skill say?

A working install responds with a summary of the skill's capabilities. If Claude says the skill is unavailable, re-check your installation — ensure the marketplace is registered and the skill is enabled in /plugin.

For example prompts and expected behavior, see skills/vulncheck-cli/tests/prompts.md.

Available Skills

Skill	Description	Status
vulncheck-cli	Query vulnerability intelligence via the VulnCheck CLI	Available

Contributing

See CONTRIBUTING.md.