# armoctl-vulns

> Claude/Codex skill by [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars · Updated 2026-10-22

ARMO vulnerability triage — list CVEs, find affected images/hosts/workloads, check runtime relevance, manage exception policies. Use when the user is investigating package vulnerabilities, container CVEs, or remediation prioritization.

## Install

```sh
git clone https://github.com/armosec/armoctl /tmp/armoctl && ln -s /tmp/armoctl/skills/armoctl-vulns ~/.claude/skills/armoctl-vulns
```

## From README

armoctl-vulns The vulns cluster covers the runtime + scan vulnerability surface. The most important triage axis is isRelevant: ARMO observes which packages are actually loaded in running workloads, so a Critical CVE in dormant code is a much lower priority than the same CVE in an in-use library. Always filter by isRelevant when scoping urgent work.

## Links

- HTML page: https://omgskills.com/library/armosec/armoctl/skills/armoctl-vulns/
- GitHub: https://github.com/armosec/armoctl
- Author: [@armosec](https://omgskills.com/library/armosec/index.md)

## More from this repo

- [armoctl](https://omgskills.com/library/armosec/armoctl/skills/armoctl/index.md) — ARMO security platform CLI — JSON-first agent-friendly access to runtime incidents, vulnerabilities, posture, risks,...
   - [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars
- [armoctl-attack-chains](https://omgskills.com/library/armosec/armoctl/skills/armoctl-attack-chains/index.md) — Attack chains — multi-step kill-chain views built by ARMO from runtime + posture signal.
   - [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars
- [armoctl-cloud-accounts](https://omgskills.com/library/armosec/armoctl/skills/armoctl-cloud-accounts/index.md) — Cloud account onboarding — list/connect/disconnect ECS accounts.
   - [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars