redteam-cve-lookup
Skill by Netw0rkNoob · updated · ★ 3.8k
CVE lookup and applicability assessment domain card. Use after reconnaissance has identified products, versions, services, or fingerprints and red-team mode needs evidence-based CVE matching before deeper testing. redteam-cve-lookup is published by Netw0rkNoob on GitHub.
Install redteam-cve-lookup
Built from the published package, never by AIgit clone --depth 1 https://github.com/Netw0rkNoob/VulnClaw /tmp/VulnClaw && mkdir -p ~/.claude/skills && cp -r /tmp/VulnClaw/vulnclaw/skills/specialized/redteam-cve-lookup ~/.claude/skills/redteam-cve-lookupRun in your terminal. Claude Code loads skills from ~/.claude/skills automatically.
git clone --depth 1 https://github.com/Netw0rkNoob/VulnClaw /tmp/VulnClaw && mkdir -p ~/.gemini/antigravity-cli/skills && cp -r /tmp/VulnClaw/vulnclaw/skills/specialized/redteam-cve-lookup ~/.gemini/antigravity-cli/skills/redteam-cve-lookupAntigravity CLI loads skills from ~/.gemini/antigravity-cli/skills, or .agents/skills for one project.
Skills can run scripts on your machine. Some need an API key: check the README.
Last commit 11 days ago
MIT: permissive, fine for commercial use
Clear description, installs from GitHub, 3,779 stars, original repository
No risky patterns in the files we checked
Weekly newsletter
Like redteam-cve-lookup? Get the best new skills every week
The best new tools, security warnings before you install something risky, and one practical tip. Free, three minute read.
Security check
ANo download-and-run commands, hidden instructions or signs of sending keys out were found.
Checked automatically: vulnclaw/skills/specialized/redteam-cve-lookup/SKILL.md. This looks for known risky patterns and is not a full audit. How grades work
Inside the skill
-
SKILL.md3 KB -
references/upstream-source.md213 B
Alternatives to redteam-cve-lookup
All alternatives →Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork.
Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration.
Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules from the event patterns. Use when investigating a suspected cluster compromise, reconstructing what an attacker did through the API server, or writing Kubernetes-specific detection content. Keywords: audit policy, audit log, kube-apiserver, exec into pod, RBAC change, anonymous access, detection rules. Do not use for syscall-level detection inside a running container - use detecting-container-runtime-threats-with-falco. '
Review a verdaccio diff, branch, or pull request against the repository review guide (security first, then npm-client compatibility, performance, product fit, maintainability), verify each finding against the code, and report actionable issues. Use for code reviews and for reviewing your own changes before or during a PR workflow.
Review multiplayer authority, RPCs, sessions, authorization, replication, inventory, economy, purchases, retries, and replay. Use when server or backend state is the security boundary.
Reviews MSBuild code changes using a 24-dimension methodology. Activates for code review, PR review, pull request analysis, design review, architecture review, code quality assessment, or style check of MSBuild code. Covers backwards compatibility, ChangeWave discipline, performance, allocation awareness, test coverage, error message quality, logging, string comparison, API surface, target authoring, cross-platform correctness, code simplification, concurrency, naming, SDK integration, evaluation model integrity, correctness, dependency management, security, and build infrastructure.
redteam-cve-lookup: common questions
How do I install redteam-cve-lookup?
Run the command above to copy the skill into ~/.claude/skills/. Claude Code picks it up automatically.
Is redteam-cve-lookup free?
The code is published under the MIT licence. The service it connects to may have its own pricing.
Is redteam-cve-lookup safe to use?
It scores 83 of 100. Grades: maintenance A, licence A, quality A. Security check: grade A, no risky patterns found in the files checked. Review the code before you install. How grades work.
What are alternatives to redteam-cve-lookup?
Similar skills: security-review, slack-bot-builder, analyzing-kubernetes-audit-logs, review-code.
