@softspark/ai-toolkit 1.3.13 → 1.3.15

package/CHANGELOG.md

@@ -7,6 +7,40 @@ Versioning follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## v1.3.15 — Quality Guardrails: Anti-Rationalization, Confidence Scoring, Verification Checklists (2026-04-08)
+
+### Added
+- **Anti-rationalization tables** — 15 core skills now include `## Common Rationalizations` sections with domain-specific excuse/rebuttal tables that prevent agent drift and shortcut-taking. Inspired by [addyosmani/agent-skills](https://github.com/addyosmani/agent-skills).
+- **Confidence scoring** (`/review`) — review findings now include per-issue confidence scores (1-10) and severity classification (critical/major/minor/nit) with a calibration guide.
+- **LLM-as-Judge self-evaluation** (`/review`) — structured self-check after review: blind spot detection, anchoring bias check, and confidence calibration.
+- **Agent verification checklists** — 10 key agents (`code-reviewer`, `test-engineer`, `security-auditor`, `debugger`, `backend-specialist`, `frontend-specialist`, `database-architect`, `performance-optimizer`, `devops-implementer`, `documenter`) now include `## Verification Checklist` exit criteria.
+- **Skill reference routing** — 7 core skills (`/review`, `/debug`, `/plan`, `/refactor`, `/tdd`, `/docs`, `/analyze`) include `## Related Skills` sections for follow-up discoverability.
+- **Intent Capture Interview** (`/onboard`) — Step 0 interview phase with 5 targeted questions to capture undocumented project intent before setup.
+
+---
+
+## v1.3.14 — CVE Scanner + Open Contributions (2026-04-08)
+
+### Added
+- **`/cve-scan` skill** — auto-detect project ecosystems (npm, pip, composer, cargo, go, ruby, dart) and scan dependencies for known CVEs using native audit tools. Includes `cve_scan.py` scanner script with parsers for npm and pip-audit, unified severity report, `--fix` and `--json` modes.
+- **CVE scan in security-auditor agent** — `/cve-scan` is now a mandatory first step in the OWASP A06 (Vulnerable Components) checklist.
+- **CVE scan in `/workflow security-audit`** — security-auditor agent runs CVE scan as part of the parallel audit phase.
+- **`security-audit` CI job** — `audit_skills.py --ci` now runs in GitHub Actions pipeline.
+- **`CODE_OF_CONDUCT.md` in CI** — added to required files check.
+- **`.github/CODEOWNERS`** — auto-assigns maintainer for review.
+- **`.github/FUNDING.yml`** — GitHub Sponsors configuration.
+- **GitHub Security Advisories** — added CVE/advisory procedure to `SECURITY.md`.
+- **Open contribution workflow** — full `CONTRIBUTING.md` rewrite (fork, branch naming, commit conventions, CI requirements), PR checklist template, blank issues enabled.
+
+### Removed
+- **`close-prs.yml`** — removed auto-close workflow to accept external PRs.
+
+### Fixed
+- **Copyright** — `LICENSE` updated from `2024-present` to `2024-2026`.
+- **`SECURITY.md`** — removed duplicate Scope section.
+
+---
+
 ## v1.3.13 — CLI --version flag (2026-04-08)
 
 ### Added

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024-present Lukasz Krzemien (biuro@softspark.eu)
+Copyright (c) 2024-2026 Lukasz Krzemien (biuro@softspark.eu)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,10 +1,10 @@
 # ai-toolkit
 
-> Professional-grade AI coding toolkit with multi-platform support. Machine-enforced safety, 90 skills, 44 agents, expanded lifecycle hooks, persona presets, experimental opt-in plugin packs, and benchmark tooling — works with Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, and Augment, ready in 60 seconds.
+> Professional-grade AI coding toolkit with multi-platform support. Machine-enforced safety, 91 skills, 44 agents, expanded lifecycle hooks, persona presets, experimental opt-in plugin packs, and benchmark tooling — works with Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, and Augment, ready in 60 seconds.
 
 [![CI](https://github.com/softspark/ai-toolkit/actions/workflows/ci.yml/badge.svg)](https://github.com/softspark/ai-toolkit/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Skills](https://img.shields.io/badge/skills-90-brightgreen)](app/skills/)
+[![Skills](https://img.shields.io/badge/skills-91-brightgreen)](app/skills/)
 [![Agents](https://img.shields.io/badge/agents-44-blue)](app/agents/)
 [![Tests](https://img.shields.io/badge/tests-377%20passing-success)](tests/)
 
@@ -21,7 +21,7 @@ ai-toolkit install
 npx @softspark/ai-toolkit install
 ```
 
-**That's it.** Claude Code picks up 90 skills, 44 agents, quality hooks, and the safety constitution automatically.
+**That's it.** Claude Code picks up 91 skills, 44 agents, quality hooks, and the safety constitution automatically.
 
 ### Update
 
@@ -134,7 +134,7 @@ Replaces all symlinks with real files, inlines rules into CLAUDE.md, copies cons
 | Component | Count | Description |
 |-----------|-------|-------------|
 | `skills/` (task) | 28 | Slash commands: `/commit`, `/build`, `/deploy`, `/test`, `/skill-audit`, ... |
-| `skills/` (hybrid) | 30 | Slash commands with agent knowledge base |
+| `skills/` (hybrid) | 31 | Slash commands with agent knowledge base |
 | `skills/` (knowledge) | 32 | Domain knowledge auto-loaded by agents |
 | `agents/` | 44 | Specialized agents across 10 categories |
 | `hooks/` | 21 global + 5 skill-scoped | Quality gates, path safety, CLAUDE.md enforcement, notifications, prompt governance, subagent lifecycle, session-end handoff, usage tracking, config protection, MCP health, governance audit |
@@ -156,7 +156,7 @@ ai-toolkit/
 │   │   ├── backend-specialist.md
 │   │   ├── security-architect.md
 │   │   └── ... (41 more)
-│   ├── skills/          # 90 skills (task / hybrid / knowledge)
+│   ├── skills/          # 91 skills (task / hybrid / knowledge)
 │   │   ├── commit/      # /commit slash command
 │   │   ├── review/      # /review slash command
 │   │   ├── clean-code/  # knowledge skill (auto-loaded)
@@ -223,6 +223,7 @@ ai-toolkit/
 | `/agent-creator` | Scaffold a new specialized agent with tools and trigger guidance | high |
 | `/plugin-creator` | Scaffold an experimental plugin pack with manifest and optional modules | high |
 | `/skill-audit` | Scan skills/agents for security risks: dangerous patterns, secrets, permissions | medium |
+| `/cve-scan` | Scan project dependencies for known CVEs using native audit tools (npm, pip, composer, cargo, go, ruby, dart) | medium |
 | `/analyze` | Code quality, complexity, and pattern analysis | medium |
 | `/fix` | Auto-fix lint/type errors | low |
 | `/build` | Build with issue detection | low |
@@ -329,25 +330,28 @@ Hook logic lives in `app/hooks/*.sh` — not inline JSON one-liners. Scripts are
 | `/migrate` | Pre | Backup verification |
 | `/rollback` | Post | State verification |
 
-### 3. Skill Security Auditing
+### 3. Security Scanning
 
-Scan all skills and agents for security risks — both interactively and in CI:
+Two complementary security tools:
+
+**`/skill-audit`** — scan skills and agents for code-level risks:
 
 ```bash
-# Interactive (Claude provides remediation suggestions)
-/skill-audit
+/skill-audit                              # Interactive (Claude remediation)
+python3 scripts/audit_skills.py --ci      # CI mode: exit 1 on HIGH
+```
+
+Detects: `eval()`/`exec()`, hardcoded secrets, permission issues, bash risks.
 
-# Deterministic Python scanner for CI pipelines
-python3 scripts/audit_skills.py           # human-readable report
-python3 scripts/audit_skills.py --json    # machine-readable JSON
-python3 scripts/audit_skills.py --ci      # exit 1 on any HIGH finding
+**`/cve-scan`** — scan project dependencies for known CVEs:
+
+```bash
+/cve-scan                                 # Auto-detect ecosystems, scan all
+python3 app/skills/cve-scan/scripts/cve_scan.py          # Direct invocation
+python3 app/skills/cve-scan/scripts/cve_scan.py --json   # Machine-readable
 ```
 
-**What it detects:**
-- Dangerous code: `eval()`, `exec()`, `subprocess(shell=True)`, `pickle.loads`
-- Hardcoded secrets: AWS keys, GitHub PATs, private keys, API tokens
-- Permission issues: knowledge skills with Bash, missing `allowed-tools`
-- Bash risks: `curl | bash`, `chmod 777`, unquoted variables
+Supports: npm, pip, composer, cargo, go, ruby, dart. Uses native audit tools — zero external deps.
 
 **Severity levels:** HIGH (blocks CI), WARN (should fix), INFO (review)
 
@@ -381,6 +385,43 @@ Three skills enforce non-negotiable quality gates with anti-rationalization tabl
 | `debugging-tactics` | `NO FIXES WITHOUT ROOT CAUSE INVESTIGATION FIRST` | 4-phase debugging: root cause → pattern → hypothesis → fix. 3+ failed fixes → question architecture. |
 | `verification-before-completion` | `NO COMPLETION CLAIMS WITHOUT FRESH VERIFICATION EVIDENCE` | Gate function: IDENTIFY → RUN → READ → VERIFY → CLAIM. "Should work now" is not evidence. |
 
+Additionally, **15 core skills** include `## Common Rationalizations` tables — domain-specific excuses with rebuttals that prevent agent drift and shortcut-taking. Skills with rationalization tables: `/review`, `/debug`, `/refactor`, `/tdd`, `/plan`, `/docs`, `/analyze`, `security-patterns`, `testing-patterns`, `api-patterns`, `ci-cd-patterns`, `clean-code`, `performance-profiling`, `git-mastery`, `database-patterns`.
+
+### Confidence Scoring & Self-Evaluation (`/review`)
+
+The `/review` skill outputs findings with per-issue confidence scores (1-10) and severity classification (critical/major/minor/nit). After completing a review, an LLM-as-Judge self-evaluation pass checks for blind spots: anchoring bias, assumption vs verification, missing unhappy paths, and calibrates confidence scores.
+
+### Agent Verification Checklists
+
+10 key agents include `## Verification Checklist` — exit criteria that MUST be met before presenting results. Each checklist is domain-specific:
+
+| Agent | Key exit criteria |
+|-------|------------------|
+| `code-reviewer` | Every finding has file:line + evidence, not just opinion |
+| `security-auditor` | Each finding includes proof-of-concept or exploit path |
+| `test-engineer` | No empty/placeholder tests, mocks only at boundaries |
+| `debugger` | Root cause identified, regression test added |
+| `backend-specialist` | Input validation, error format, query optimization |
+| `frontend-specialist` | Empty/loading/error states, accessibility, responsive |
+| `database-architect` | Migration tested on prod-like volume, rollback tested |
+| `performance-optimizer` | Baseline measured, profiler evidence attached |
+| `devops-implementer` | Dry run passed, rollback documented, no hardcoded secrets |
+| `documenter` | Code examples runnable, no placeholders, valid links |
+
+### Skill Reference Routing
+
+7 core skills include `## Related Skills` sections that suggest logical follow-up skills, improving discoverability:
+
+```
+/review → found issues? → /debug, /tdd, /cve-scan, /analyze
+/debug  → bug fixed?   → /review, /tdd, /workflow incident-response
+/plan   → approved?    → /orchestrate, /write-a-prd, /grill-me
+```
+
+### Intent Capture Interview (`/onboard`)
+
+The `/onboard` skill now includes a Step 0 interview phase before setup — asking 5 targeted questions to capture undocumented project intent (common contributor mistakes, protected files, deployment model, non-obvious constraints, review culture). Answers customize the generated `CLAUDE.md`.
+
 ### 7. Two-Stage Review (`/subagent-development`)
 
 Per-task review pipeline inspired by [obra/superpowers](https://github.com/obra/superpowers):

package/app/ARCHITECTURE.md

@@ -134,7 +134,7 @@ Universal multi-agent system for software development. Works across all reposito
 | `prd-to-issues` | `/prd-to-issues` | Break PRD into GitHub issues with vertical slices and HITL/AFK tagging |
 | `skill-audit` | `/skill-audit` | Scan skills and agents for security risks, dangerous patterns, secrets |
 
-### Hybrid Skills (30)
+### Hybrid Skills (31)
 | Skill | Slash Command | Purpose |
 |-------|---------------|---------|
 | `explore` | `/explore` | Codebase exploration and tech stack discovery |
@@ -143,6 +143,7 @@ Universal multi-agent system for software development. Works across all reposito
 | `plan` | `/plan` | Create structured plan with task breakdown |
 | `refactor` | `/refactor` | Plan and execute code refactoring with safety checks |
 | `analyze` | `/analyze` | Analyze code quality, complexity, and patterns |
+| `cve-scan` | `/cve-scan` | Scan project dependencies for CVEs using native tools (npm, pip, composer, cargo, go, ruby, dart) |
 | `docs` | `/docs` | Generate/update documentation (README, API docs, architecture notes) |
 | `search` | `/search` | Search knowledge base (MCP + local fallback) |
 | `explain` | `/explain` | Explain file/module architecture with Mermaid diagrams |

package/app/agents/backend-specialist.md

@@ -184,6 +184,14 @@ After implementing significant changes, update documentation:
 ### Delegation
 For large documentation tasks, hand off to `documenter` agent.
 
+## Verification Checklist
+Before presenting implementation:
+- [ ] All new endpoints have input validation
+- [ ] Error responses follow the project's error format
+- [ ] Database queries are optimized (checked with EXPLAIN if applicable)
+- [ ] New dependencies are justified and audited
+- [ ] Migration is reversible
+
 ## KB Integration
 
 Before coding, search knowledge base:

package/app/agents/code-reviewer.md

@@ -177,6 +177,15 @@ After significant reviews, update documentation:
 ### Delegation
 For large documentation tasks, hand off to `documenter` agent.
 
+## Verification Checklist
+Before presenting review results:
+- [ ] Every finding includes file:line reference
+- [ ] Each finding has evidence (code snippet or reasoning), not just opinion
+- [ ] Severity rating reflects actual impact, not gut feeling
+- [ ] "No findings" includes list of specific checks performed
+- [ ] Security-sensitive files received deeper scrutiny
+- [ ] Test coverage gaps are flagged, not assumed covered
+
 ## Limitations
 
 - **Security penetration testing** → Use `security-auditor`

package/app/agents/database-architect.md

@@ -308,6 +308,14 @@ After schema/database changes, update documentation:
 ### Delegation
 For large documentation tasks, hand off to `documenter` agent.
 
+## Verification Checklist
+Before presenting schema changes:
+- [ ] Migration tested on production-like data volume
+- [ ] Rollback script exists and was tested
+- [ ] Indexes cover the expected query patterns
+- [ ] No long-running locks on large tables
+- [ ] Application handles both old and new schema during migration
+
 ## KB Integration
 
 Before designing, search knowledge base:

package/app/agents/debugger.md

@@ -231,6 +231,14 @@ After fixing significant bugs, update documentation:
 ### Delegation
 For large documentation tasks, hand off to `documenter` agent.
 
+## Verification Checklist
+Before claiming a bug is fixed:
+- [ ] Root cause identified, not just symptoms addressed
+- [ ] Fix was verified by reproducing the original failure first
+- [ ] Regression test added to prevent recurrence
+- [ ] Related code paths checked for similar issues
+- [ ] Fix doesn't introduce new side effects
+
 ## Limitations
 
 - **Performance profiling** → Use `performance-optimizer`

package/app/agents/devops-implementer.md

@@ -187,6 +187,14 @@ instructions: |
 ---
 ```
 
+## Verification Checklist
+Before presenting infrastructure changes:
+- [ ] Dry run completed successfully
+- [ ] Rollback procedure documented and tested
+- [ ] Secrets are not hardcoded or logged
+- [ ] Health checks configured for new services
+- [ ] Resource limits set to prevent runaway costs
+
 ## Limitations
 
 - **Architectural decisions** → Use `infrastructure-architect`

package/app/agents/documenter.md

@@ -357,6 +357,14 @@ last_updated: "YYYY-MM-DD"
 - Add diagrams where helpful
 - Version documentation with code
 
+## Verification Checklist
+Before presenting documentation:
+- [ ] Code examples are tested and runnable
+- [ ] No placeholder text or TODO markers remain
+- [ ] Links and references are valid
+- [ ] Architecture decisions include rationale (not just "what")
+- [ ] KB documents have complete YAML frontmatter
+
 ## Limitations
 
 - **Code implementation** → Use `devops-implementer`

package/app/agents/frontend-specialist.md

@@ -200,6 +200,14 @@ After implementing significant changes, update documentation:
 ### Delegation
 For large documentation tasks, hand off to `documenter` agent.
 
+## Verification Checklist
+Before presenting implementation:
+- [ ] Components render correctly with empty/loading/error states
+- [ ] Accessibility basics checked (keyboard nav, aria labels, contrast)
+- [ ] No console errors or warnings in dev tools
+- [ ] Responsive behavior verified at mobile/tablet/desktop breakpoints
+- [ ] Bundle size impact assessed for new dependencies
+
 ## KB Integration
 
 Before coding, search knowledge base:

package/app/agents/performance-optimizer.md

@@ -247,6 +247,14 @@ After performance optimizations, update documentation:
 ### Delegation
 For large documentation tasks, hand off to `documenter` agent.
 
+## Verification Checklist
+Before presenting optimization:
+- [ ] Baseline measurement taken before changes
+- [ ] Improvement measured with realistic data, not synthetic benchmarks
+- [ ] No regressions in other metrics (memory, latency, correctness)
+- [ ] Optimization targets the actual bottleneck (profiler evidence attached)
+- [ ] Cache invalidation strategy documented if caching was added
+
 ## Limitations
 
 - **Production incidents** → Use `incident-responder`

package/app/agents/security-auditor.md

@@ -63,7 +63,7 @@ hybrid_search_kb(query="vulnerability {type}", limit=10)
 - [ ] Unnecessary features disabled
 
 ### A06:2021 - Vulnerable Components
-- [ ] Dependencies scanned for CVEs
+- [ ] Dependencies scanned for CVEs — **run `/cve-scan` or `python3 ${SKILL_DIR}/cve-scan/scripts/cve_scan.py`**
 - [ ] Components up to date
 - [ ] SBOM maintained
 
@@ -91,6 +91,21 @@ hybrid_search_kb(query="vulnerability {type}", limit=10)
 
 ## Security Audit Commands
 
+### Dependency CVE Scan (MANDATORY — run FIRST)
+
+```bash
+# Auto-detect ecosystems and scan all dependencies for CVEs
+python3 app/skills/cve-scan/scripts/cve_scan.py
+
+# JSON output for structured analysis
+python3 app/skills/cve-scan/scripts/cve_scan.py --json
+
+# Or use the skill interactively
+/cve-scan
+```
+
+### Code & Infrastructure Scans
+
 ```bash
 # Check for secrets in code
 docker exec {app-container} gitleaks detect --source=/app
@@ -286,6 +301,15 @@ For large documentation tasks, hand off to `documenter` agent.
 - No destructive testing without explicit approval
 - Report findings responsibly
 
+## Verification Checklist
+Before presenting security findings:
+- [ ] Each finding includes proof-of-concept or exploit path
+- [ ] Severity ratings reference actual impact, not theoretical risk
+- [ ] "No findings" includes the specific checks performed
+- [ ] Dependencies were scanned, not just application code
+- [ ] Secrets scan covered all file types (not just source code)
+- [ ] Auth flows were traced end-to-end, not spot-checked
+
 ## Limitations
 
 - **Code implementation** → Use `devops-implementer`

package/app/agents/test-engineer.md

@@ -257,6 +257,15 @@ After writing significant tests, update documentation:
 ### Delegation
 For large documentation tasks, hand off to `documenter` agent.
 
+## Verification Checklist
+Before presenting test results:
+- [ ] Every test has a clear assertion (no empty or placeholder tests)
+- [ ] Edge cases are explicitly tested, not assumed
+- [ ] Mocks are only at system boundaries, not internal collaborators
+- [ ] Test names describe behavior, not implementation
+- [ ] Flaky test patterns (time, network, order-dependent) are flagged
+- [ ] Coverage gaps are reported with specific uncovered paths
+
 ## Limitations
 
 - **Code implementation** → Use `devops-implementer`

package/app/skills/analyze/SKILL.md

@@ -82,6 +82,15 @@ python3 ${CLAUDE_SKILL_DIR}/scripts/complexity.py .
 
 Reports file counts by type, largest files, TODO/FIXME counts, and total code lines.
 
+## Common Rationalizations
+
+| Excuse | Why It's Wrong |
+|--------|----------------|
+| "The linter is green, the code is fine" | Linters catch syntax, not design flaws — analysis covers architecture and patterns |
+| "We know where the problems are" | Intuition misses systemic issues — data-driven analysis reveals hidden hotspots |
+| "Analysis takes too long" | A 5-minute scan prevents weeks of debugging — front-load the investment |
+| "It's legacy code, analysis won't help" | Legacy code benefits most — find the critical paths before they break |
+
 ## Tools Used
 
 | Language | Tools |
@@ -90,3 +99,9 @@ Reports file counts by type, largest files, TODO/FIXME counts, and total code li
 | JavaScript | eslint, tsc |
 | Go | golangci-lint |
 | Rust | clippy |
+
+## Related Skills
+- Found quality issues? → `/refactor` to fix them systematically
+- Security issues detected? → `/cve-scan` for dependency audit
+- Want deeper architecture review? → `/architecture-audit` for friction discovery
+- Performance hotspots found? → `/workflow performance-optimization`

package/app/skills/api-patterns/SKILL.md

@@ -292,6 +292,16 @@ Accept: application/vnd.myapi.v1+json
 
 ---
 
+## Common Rationalizations
+
+| Excuse | Why It's Wrong |
+|--------|----------------|
+| "We'll version the API later" | Unversioned APIs break clients on every change — version from day one |
+| "Retries are the client's problem" | Server-side idempotency prevents data corruption — design for at-least-once delivery |
+| "We'll add rate limiting later" | Unprotected endpoints get abused within hours of deployment |
+| "Error messages are just for debugging" | Error responses are your API's UX — clients depend on consistent, parseable errors |
+| "PATCH and PUT are the same thing" | PUT replaces the resource, PATCH modifies it — wrong semantics cause data loss |
+
 ## Best Practices
 
 - [ ] Use HTTPS only

package/app/skills/ci-cd-patterns/SKILL.md

@@ -291,6 +291,16 @@ env:
 | `feat:` | Minor (0.x.0) | `feat: add user search endpoint` |
 | `feat!:` / `BREAKING CHANGE:` | Major (x.0.0) | `feat!: change API response format` |
 
+## Common Rationalizations
+
+| Excuse | Why It's Wrong |
+|--------|----------------|
+| "CI is green, ship it" | CI tests the happy path — verify edge cases, security, and performance separately |
+| "Manual deploys give us more control" | Manual deploys give you more human error — automate the repeatable parts |
+| "We'll set up CI when the project is bigger" | Small projects grow fast — CI debt compounds and retrofitting is painful |
+| "Caching isn't worth the complexity" | Uncached builds waste developer time daily — caching pays for itself in a week |
+| "Feature flags are over-engineering" | Feature flags decouple deploy from release — they're the cheapest safety net |
+
 ## Anti-Patterns
 - Secrets in pipeline logs or environment dumps
 - No caching (slow builds)

package/app/skills/clean-code/SKILL.md

@@ -100,6 +100,16 @@ Keep modules focused. Order contents consistently: imports (stdlib, third-party,
 
 ---
 
+## Common Rationalizations
+
+| Excuse | Why It's Wrong |
+|--------|----------------|
+| "It's readable enough" | "Enough" means someone will misread it eventually — clarity prevents incidents |
+| "Refactoring for readability is gold-plating" | Readability is maintainability — future you will thank present you |
+| "Short variable names are faster to type" | You type it once, readers parse it hundreds of times — optimize for reading |
+| "DRY means never repeat anything" | Wrong DRY creates coupling — duplicate until you see the real abstraction |
+| "More abstractions = cleaner code" | Premature abstraction is worse than duplication — wait for the third use |
+
 ## Language-Specific References
 
 For detailed patterns, type hints, linting configuration, and idiomatic code per language:

package/app/skills/cve-scan/SKILL.md

@@ -0,0 +1,134 @@
+---
+name: cve-scan
+description: "Scan project dependencies for known CVEs using native audit tools (npm, pip, composer, cargo, go, bundler, dart)"
+user-invocable: true
+effort: medium
+argument-hint: "[--ecosystem npm|pip|composer|cargo|go|ruby|dart] [--fix] [--json]"
+allowed-tools: Read, Grep, Glob, Bash
+---
+
+# /cve-scan - Dependency CVE Scanner
+
+$ARGUMENTS
+
+Detect project ecosystems and scan dependencies for known vulnerabilities using native audit tools. Zero external dependencies — uses tools already installed in the project environment.
+
+## Usage
+
+```
+/cve-scan                        # Auto-detect all ecosystems, scan all
+/cve-scan --ecosystem npm        # Force specific ecosystem
+/cve-scan --fix                  # Auto-fix where possible (npm audit fix, etc.)
+/cve-scan --json                 # Machine-readable JSON output
+```
+
+## What This Command Does
+
+1. **Detect** package managers by lock/manifest files in the project
+2. **Run** the native audit command for each detected ecosystem
+3. **Parse** results into a unified severity-based report
+4. **Report** CVE IDs, affected packages, installed vs fixed versions, advisory links
+5. **Fix** automatically when `--fix` is passed (where the tool supports it)
+
+## Ecosystem Detection & Commands
+
+| Manifest File | Lock File | Ecosystem | Audit Command | CVE Database |
+|---------------|-----------|-----------|---------------|--------------|
+| `package.json` | `package-lock.json` / `yarn.lock` / `pnpm-lock.yaml` | npm/yarn/pnpm | `npm audit --json` / `yarn audit --json` / `pnpm audit --json` | GitHub Advisory DB |
+| `requirements.txt` / `pyproject.toml` / `setup.py` | `requirements.txt` | pip | `pip-audit --format=json` | OSV / PyPI Advisory |
+| `composer.json` | `composer.lock` | composer | `composer audit --format=json` | Packagist / FriendsOfPHP |
+| `Cargo.toml` | `Cargo.lock` | cargo | `cargo audit --json` | RustSec Advisory DB |
+| `go.mod` | `go.sum` | go | `govulncheck ./...` | Go Vulnerability DB |
+| `Gemfile` | `Gemfile.lock` | bundler | `bundle-audit check` | Ruby Advisory DB |
+| `pubspec.yaml` | `pubspec.lock` | dart/flutter | `dart pub outdated --json` | pub.dev |
+
+## Steps
+
+1. **Detect ecosystems**: Glob for manifest/lock files at project root and common subdirectories
+2. **Check tool availability**: Verify audit tool is installed for each detected ecosystem
+3. **Run audit**: Execute native audit command, capture JSON output where available
+4. **Parse results**: Extract CVE ID, package name, installed version, fixed version, severity, advisory URL
+5. **Unified report**: Merge all ecosystems into single report sorted by severity
+6. **Fix mode**: If `--fix` passed, run `npm audit fix`, `pip-audit --fix`, `cargo audit fix` etc.
+7. **Exit code**: Non-zero if any CRITICAL or HIGH vulnerabilities found
+
+## Detection Script
+
+Run the bundled detection script to quickly identify ecosystems and tool availability:
+
+```bash
+python3 ${CLAUDE_SKILL_DIR}/scripts/cve_scan.py
+```
+
+Options:
+```bash
+python3 ${CLAUDE_SKILL_DIR}/scripts/cve_scan.py --json      # JSON output
+python3 ${CLAUDE_SKILL_DIR}/scripts/cve_scan.py --fix        # Auto-fix mode
+python3 ${CLAUDE_SKILL_DIR}/scripts/cve_scan.py --ecosystem npm  # Specific ecosystem
+```
+
+## Output Format
+
+```markdown
+## CVE Scan Report
+
+### Ecosystems Detected
+- npm (package-lock.json) — `npm audit` available ✓
+- pip (requirements.txt) — `pip-audit` not installed ⚠️
+
+### Summary
+| Severity | Count |
+|----------|-------|
+| CRITICAL | 1 |
+| HIGH | 3 |
+| MEDIUM | 5 |
+| LOW | 2 |
+
+### Findings
+
+#### [CRITICAL] lodash@4.17.20 (npm)
+- **CVE**: CVE-2021-23337
+- **Title**: Prototype Pollution
+- **Fixed in**: 4.17.21
+- **Advisory**: https://github.com/advisories/GHSA-35jh-r3h4-6jhm
+
+#### [HIGH] django@3.2.0 (pip)
+- **CVE**: CVE-2023-36053
+- **Title**: Potential ReDoS in EmailValidator
+- **Fixed in**: 3.2.20
+- **Advisory**: https://osv.dev/vulnerability/PYSEC-2023-100
+
+### Tool Availability
+| Ecosystem | Tool | Status | Install Hint |
+|-----------|------|--------|--------------|
+| npm | npm audit | ✓ installed | — |
+| pip | pip-audit | ✗ missing | `pip install pip-audit` |
+| cargo | cargo-audit | ✗ missing | `cargo install cargo-audit` |
+```
+
+## Handling Missing Tools
+
+When an audit tool is not installed, the skill:
+1. Reports it as a warning (not a failure)
+2. Provides the install command for the missing tool
+3. Continues scanning other detected ecosystems
+
+Install hints per ecosystem:
+
+| Tool | Install Command |
+|------|----------------|
+| `pip-audit` | `pip install pip-audit` |
+| `cargo-audit` | `cargo install cargo-audit` |
+| `govulncheck` | `go install golang.org/x/vuln/cmd/govulncheck@latest` |
+| `bundle-audit` | `gem install bundler-audit` |
+| `composer` | Built-in since Composer 2.4 |
+
+## Rules
+
+- Never modify `package-lock.json`, `Cargo.lock`, or other lock files without `--fix` flag
+- Always report tool availability — missing tool is a finding, not a failure
+- Parse JSON output when available for structured data; fall back to text parsing
+- CRITICAL and HIGH findings should be highlighted prominently
+- Include advisory URLs for every CVE when available
+- This skill is READ-ONLY by default (no installs, no upgrades) unless `--fix` is passed
+- Respect `.auditrc`, `.nsprc`, or equivalent ignore files if present