Stats
Actions
Tags
From ecosystems
Query advisories.ecosyste.ms for security vulnerability metadata aggregated from GitHub Security Advisories, OSV, RustSec, ErlEf and others. Use when checking a package or repo for known CVEs, listing recent advisories for an ecosystem, or fetching CVSS/EPSS scores and patched version ranges.
How this skill is triggered — by the user, by Claude, or both
Slash command
/ecosystems:advisoriesThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Base URL: `https://advisories.ecosyste.ms/api/v1`
Base URL: https://advisories.ecosyste.ms/api/v1
All responses are JSON. No auth required. Set a User-Agent header. Results are deduplicated by CVE across sources.
Full OpenAPI spec: https://advisories.ecosyste.ms/docs/api/v1/openapi.yaml
By purl (include a version to get only advisories affecting that version) or by source repository URL:
curl -s 'https://advisories.ecosyste.ms/api/v1/advisories/lookup?purl=pkg:npm/[email protected]'
curl -s 'https://advisories.ecosyste.ms/api/v1/advisories/lookup?repository_url=https://github.com/rails/rails'
# all advisories for a package
curl -s 'https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=django'
# critical severity only, newest first
curl -s 'https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&severity=CRITICAL&sort=published_at&order=desc'
# everything published since a date
curl -s 'https://advisories.ecosyste.ms/api/v1/advisories?created_after=2026-01-01T00:00:00Z'
Filters: ecosystem, package_name, severity (LOW/MODERATE/HIGH/CRITICAL), repository_url, source, created_after, updated_after, sort, order, page, per_page.
curl -s 'https://advisories.ecosyste.ms/api/v1/advisories/GHSA-jf85-cpcp-j695'
curl -s 'https://advisories.ecosyste.ms/api/v1/sources'
uuid, title, description, severity, cvss_score, cvss_vector, epss_percentage, epss_percentile, published_at, withdrawn_at, identifiers (CVE/GHSA ids), references, repository_url, blast_radius, source_kind, packages[] (each with ecosystem, package_name, purl, versions[].vulnerable_version_range, versions[].first_patched_version, affected_versions, unaffected_versions).
npx claudepluginhub ecosyste-ms/skills --plugin ecosystemsSearches MemPalace before answering questions about past work, people, projects, or prior decisions. Returns verbatim stored content instead of guessing from model memory.
Guides Payload CMS config (payload.config.ts), collections, fields, hooks, access control, APIs. Debugs validation errors, security, relationships, queries, transactions, hook behavior.
Implements vector databases with Pinecone, Weaviate, Qdrant, Milvus, pgvector for semantic search, RAG, recommendations, and similarity systems. Optimizes embeddings, indexing, and hybrid search.