AI Plugin IndexNPM Package Vulnerability Runbook vs security-review
NPM Package Vulnerability Runbook and security-review are both security skills. security-review scores higher (89 vs 40 out of 100). security-review has more GitHub stars (41k), and security-review was updated more recently (today). The table compares them side by side.
| NPM Package Vulnerability Runbook | security-review | |
|---|---|---|
| Score | 40 / 100 | 89 / 100 |
| What it does | Automates vulnerability triage for Node.js projects using the npm Audit API and OSV.dev API. Generates step-by-step remediation runbooks with patching commands and dependency tree analysis. | Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork. |
| Publisher | Community: agentskillexchange | Community: codewhale-hq |
| Grades | Maintenance A, Licence A, Quality B | Maintenance A, Licence A, Quality A |
| npm downloads a week | Not on npm | Not on npm |
| Runs | Skill | Skill |
| Works with | Claude Code, Claude apps | Claude Code, Claude apps |
| GitHub stars | 54 | 41,112 |
| Last commit | 20 Oct 2026 | 23 Oct 2026 |
| Licence | MIT | MIT |
| Listed since | 19 Oct 2026 | 23 Oct 2026 |
| Install NPM Package Vulnerability Runbook | Install security-review |
Questions
Is NPM Package Vulnerability Runbook or security-review more popular?
security-review has more GitHub stars: 41,112.
Can I use NPM Package Vulnerability Runbook and security-review together?
Yes. AI assistants can load several skills at once. Install both and the assistant picks the right one for each task.