cve-remediation
Skill by NVIDIA-AI-Blueprints · updated · ★ 81
Discoverability shim for the Retail-Agentic-Commerce CVE remediation Codex skill. Use for CVE, BDSA, GHSA, OSV, Dependabot, Black Duck, Snyk, npm, PyPI, or package advisory remediation. cve-remediation is published by NVIDIA-AI-Blueprints on GitHub.
Last commit 6 days ago
Apache-2.0: permissive, fine for commercial use
Clear description, installs from GitHub, 81 stars, original repository
Not checked yet. What we check
Install cve-remediation
Built from the published package, never by AIgit clone --depth 1 https://github.com/NVIDIA-AI-Blueprints/Retail-Agentic-Commerce /tmp/Retail-Agentic-Commerce && mkdir -p ~/.claude/skills && cp -r /tmp/Retail-Agentic-Commerce/.agents/skills/cve-remediation ~/.claude/skills/cve-remediationRun in your terminal. Claude Code loads skills from ~/.claude/skills automatically.
git clone --depth 1 https://github.com/NVIDIA-AI-Blueprints/Retail-Agentic-Commerce /tmp/Retail-Agentic-Commerce && mkdir -p ~/.gemini/antigravity-cli/skills && cp -r /tmp/Retail-Agentic-Commerce/.agents/skills/cve-remediation ~/.gemini/antigravity-cli/skills/cve-remediationAntigravity CLI loads skills from ~/.gemini/antigravity-cli/skills, or .agents/skills for one project.
Skills can run scripts on your machine. Some need an API key: check the README.
Alternatives to cve-remediation
All alternatives →Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration.
Use the reverse-skill repository from Codex for authorized reverse engineering, security analysis, CTF, and defensive testing tasks. Requires the reverse-skill repository to be available as the current workspace or an explicitly supplied local path.
Evidence-led osint operator technical methods and evidence interpretation for the relevant environment.
Reviews MSBuild code changes using a 24-dimension methodology. Activates for code review, PR review, pull request analysis, design review, architecture review, code quality assessment, or style check of MSBuild code. Covers backwards compatibility, ChangeWave discipline, performance, allocation awareness, test coverage, error message quality, logging, string comparison, API surface, target authoring, cross-platform correctness, code simplification, concurrency, naming, SDK integration, evaluation model integrity, correctness, dependency management, security, and build infrastructure.
Review multiplayer authority, RPCs, sessions, authorization, replication, inventory, economy, purchases, retries, and replay. Use when server or backend state is the security boundary.
Activate when reviewing or modifying dependency resolution, lockfile schema, package downloaders, signature/integrity checks, file integration cleanup, or anything that could expose APM to dependency confusion, typosquatting, malicious packages, or token leakage.
cve-remediation: common questions
How do I install cve-remediation?
Run the command above to copy the skill into ~/.claude/skills/. Claude Code picks it up automatically.
Is cve-remediation free?
The code is published under the Apache-2.0 licence. The service it connects to may have its own pricing.
Is cve-remediation safe to use?
It scores 68 of 100. Grades: maintenance A, licence A, quality B. The security check has not run for it yet. Review the code before you install. How grades work.
What are alternatives to cve-remediation?
Similar skills: slack-bot-builder, reverse-skill-router, osint-operator-specialist-methods, reviewing-msbuild-code.
