OpenClaw

x-osv

CLI for Google OSV database. Query vulnerabilities for packages, scan local projects for vulnerable dependencies. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill). **Required Tool**: Install osv-scanner for project scanning (see https://github.com/google/osv-scanner).

edwinjhlee0 来源安装数☆ 0 仓库 Stars

查看来源 ↗安装与使用 SKILL.md ↗

安装与使用

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。

SkillHub CLI

skillhub install edwinjhlee/x-osv

打开来源仓库，查看说明和兼容环境后，按来源提供的命令或步骤安装。

将来源链接提供给你的 Agent，让它先读取说明、核对依赖，并向你说明将执行的安装步骤。

查看来源 ↗使用指南

技能说明

x osv - Open Source Vulnerabilities

Query Google OSV database for package vulnerabilities and scan local projects.

Quick Start

# Query vulnerability for a package
x osv q -p jq -v 1.7.1

# Scan local project for vulnerabilities (requires osv-scanner)
x osv scanner .

Features

Vulnerability Query: Query OSV database for package vulnerabilities
Project Scanning: Scan local projects using osv-scanner
SARIF Reports: Generate SARIF security reports
Multi-ecosystem: Supports npm, pip, Maven, Go, Rust, etc.

Prerequisites

Tool	Purpose	Install
x-cmd	Required module runtime	`brew install x-cmd`
osv-scanner	Project scanning	https://github.com/google/osv-scanner

Commands

Command	Description
`x osv q <pkg>`	Query vulnerabilities for a package
`x osv scanner <path>`	Scan project for vulnerabilities (requires osv-scanner)
`x osv vuln <id>`	Get vulnerability details
`x osv sarif`	Generate SARIF security reports
`x osv eco`	List supported ecosystems

Examples

Query Vulnerabilities

# Query specific package version
x osv q -p jq -v 1.7.1

# Query by commit hash
x osv q -c 6879efc2c1596d11a6a6ad296f80063b558d5e0f

Scan Projects

# Scan current directory (requires osv-scanner installed)
x osv scanner .

# Scan specific lockfile
x osv scanner --lockfile requirements.txt
x osv scanner --lockfile package-lock.json

Generate SARIF Reports

# Scan npm project
x osv sarif npm ./my-project/

# Scan pip project with JSON output
x osv sarif pip ./project/ --json

Supported Ecosystems

View all supported ecosystems:

x osv eco

Includes: npm, PyPI, Maven, Go, Rust, NuGet, Packagist, etc.

API Key

No API key required for basic usage. Rate limits apply for unauthenticated requests.

[OSV.dev](https://osv...

来源信息

Source: github
Repository: openclaw/skills
Path: skills/edwinjhlee/x-osv
Version: —
Commit: 9fc9f62185cbf6766091cc85da5a58e86d2a4651
分类来源: rules
状态: active
可见性: public

这些信息来自收录时的来源分析，可能滞后；使用前请核对最新来源文件。

来源内容

SKILL.md

# x osv - Open Source Vulnerabilities

> Query Google OSV database for package vulnerabilities and scan local projects.

---

## Quick Start

```bash
# Query vulnerability for a package
x osv q -p jq -v 1.7.1

# Scan local project for vulnerabilities (requires osv-scanner)
x osv scanner .
```

---

## Features

- **Vulnerability Query**: Query OSV database for package vulnerabilities
- **Project Scanning**: Scan local projects using osv-scanner
- **SARIF Reports**: Generate SARIF security reports
- **Multi-ecosystem**: Supports npm, pip, Maven, Go, Rust, etc.

---

## Prerequisites

| Tool | Purpose | Install |
|------|---------|---------|
| x-cmd | Required module runtime | `brew install x-cmd` |
| osv-scanner | Project scanning | https://github.com/google/osv-scanner |

---

## Commands

| Command | Description |
|---------|-------------|
| `x osv q <pkg>` | Query vulnerabilities for a package |
| `x osv scanner <path>` | Scan project for vulnerabilities (requires osv-scanner) |
| `x osv vuln <id>` | Get vulnerability details |
| `x osv sarif` | Generate SARIF security reports |
| `x osv eco` | List supported ecosystems |

---

## Examples

### Query Vulnerabilities

```bash
# Query specific package version
x osv q -p jq -v 1.7.1

# Query by commit hash
x osv q -c 6879efc2c1596d11a6a6ad296f80063b558d5e0f
```

### Scan Projects

```bash
# Scan current directory (requires osv-scanner installed)
x osv scanner .

# Scan specific lockfile
x osv scanner --lockfile requirements.txt
x osv scanner --lockfile package-lock.json
```

### Generate SARIF Reports

```bash
# Scan npm project
x osv sarif npm ./my-project/

# Scan pip project with JSON output
x osv sarif pip ./project/ --json
```

---

## Supported Ecosystems

View all supported ecosystems:
```bash
x osv eco
```

Includes: npm, PyPI, Maven, Go, Rust, NuGet, Packagist, etc.

---

## API Key

No API key required for basic usage. Rate limits apply for unauthenticated requests.

---

## Related

- [OSV.dev](https://osv...

搜索