ns-analyze-vulnerabilities
Analyzes live runtime vulnerabilities loaded by connected N|Solid Node.js processes. Use when the user wants to know which CVEs are actually present in running apps, active exploitable/live vulnerabilities, zero-day exposure, supply-chain risk in production, or production package risk. For static npm-audit-style project dependency scans, use ns-audit-dependencies instead.
Install
With your agent
Install OMGSkills skill "nodesource/nsolid-skills-plugin:skills/ns-analyze-vulnerabilities" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/nodesource/nsolid-skills-plugin /tmp/nsolid-skills-plugin && ln -s /tmp/nsolid-skills-plugin/skills/ns-analyze-vulnerabilities ~/.claude/skills/ns-analyze-vulnerabilitiesFrom README
High-Level Overview Call the vulnerabilities tool with showLimit/page when scanning large fleets. Summarize the output to identify which application (app) has the most critical issues. Detail Per App For a specific vulnerable app, call application-packages (parameters: exact app name, mode='flat'). Timeout note: The MCP server allows 180s for this streaming endpoint, but the MCP client may drop after 60s. If it times out, proceed using data already collected from the vulnerabilities tool. Discover First Detection Time Call events-historic (parameters: type='new-vulnerability-found', plus app, start, and end when known). CRITICAL: The MCP tool description may incorrectly say vulnerability-detected. Do not use that. Valid Security Events: new-vulnerability-found, package-vulnerabilities-updated, vulnerabilities-database-updated, active-vulns-updated. If this endpoint returns null, it means there are no matched historical events. Proceed without failing the audit.
More from this repo
ns-advanced-memory-leak-hunter
Performs an advanced N|Solid memory leak hunt comparing baseline vs peak heap evidence to isolate retained...
ns-analyze-asset
Analyzes an existing N|Solid diagnostic asset by asset ID or local asset path using asset-summary.
ns-analyze-event
Investigates an existing N|Solid event payload and correlates relevant MCP evidence.