# ns-analyze-vulnerabilities

> Claude/Codex skill by [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars · Updated 2026-09-16

Analyzes live runtime vulnerabilities loaded by connected N|Solid Node.js processes. Use when the user wants to know which CVEs are actually present in running apps, active exploitable/live vulnerabilities, zero-day exposure, supply-chain risk in production, or production package risk. For static npm-audit-style project dependency scans, use ns-audit-dependencies instead.

## Install

```sh
git clone https://github.com/nodesource/nsolid-skills-plugin /tmp/nsolid-skills-plugin && ln -s /tmp/nsolid-skills-plugin/skills/ns-analyze-vulnerabilities ~/.claude/skills/ns-analyze-vulnerabilities
```

## From README

High-Level Overview Call the vulnerabilities tool with showLimit/page when scanning large fleets. Summarize the output to identify which application (app) has the most critical issues. Detail Per App For a specific vulnerable app, call application-packages (parameters: exact app name, mode='flat'). Timeout note: The MCP server allows 180s for this streaming endpoint, but the MCP client may drop after 60s. If it times out, proceed using data already collected from the vulnerabilities tool. Discover First Detection Time Call events-historic (parameters: type='new-vulnerability-found', plus app, start, and end when known). CRITICAL: The MCP tool description may incorrectly say vulnerability-detected. Do not use that. Valid Security Events: new-vulnerability-found, package-vulnerabilities-updated, vulnerabilities-database-updated, active-vulns-updated. If this endpoint returns null, it means there are no matched historical events. Proceed without failing the audit.

## Links

- HTML page: https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-analyze-vulnerabilities/
- GitHub: https://github.com/nodesource/nsolid-skills-plugin
- Author: [@nodesource](https://omgskills.com/library/nodesource/index.md)

## More from this repo

- [ns-advanced-memory-leak-hunter](https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-advanced-memory-leak-hunter/index.md) — Performs an advanced N|Solid memory leak hunt comparing baseline vs peak heap evidence to isolate retained...
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars
- [ns-analyze-asset](https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-analyze-asset/index.md) — Analyzes an existing N|Solid diagnostic asset by asset ID or local asset path using asset-summary.
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars
- [ns-analyze-event](https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-analyze-event/index.md) — Investigates an existing N|Solid event payload and correlates relevant MCP evidence.
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars