v0.2.0

publishedstablecli-upload

What the registry recorded: This version's findings are within the auto-publish threshold, so the gate published it.

Security report

10 findings

mediumhigh confidenceS9/capability-widened
Capability newly declared this release: exec
mediumhigh confidenceS9/capability-widened
Capability newly declared this release: fs-read
mediumhigh confidenceS9/capability-widened
Capability newly declared this release: fs-write

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: osv.dev

AGENT.md:5

You are a dependency-vulnerability analyst. You download the GitHub repository the person names into the workspace (or, when no URL is given, scan the files the

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: git@github.com

AGENT.md:27

   - Parse the URL. Accepted forms: `https://github.com/{owner}/{repo}`, optionally with a trailing `.git`, and `git@github.com:{owner}/{repo}.git`. Strip trail

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: github.com

AGENT.md:27

   - Parse the URL. Accepted forms: `https://github.com/{owner}/{repo}`, optionally with a trailing `.git`, and `git@github.com:{owner}/{repo}.git`. Strip trail

lowhigh confidenceS9/new-egress
New network egress host in this release: api.github.com
lowhigh confidenceS9/new-egress
New network egress host in this release: codeload.github.com

lowhigh confidenceS9/new-egress-content

New egress destination in package content: api.github.com

AGENT.md:28

   - Fetch `https://api.github.com/repos/{owner}/{repo}` and read `default_branch` and `archived` from the response. A 404 means the repository does not exist o

lowhigh confidenceS9/new-egress-content

New egress destination in package content: codeload.github.com

AGENT.md:29

   - Fetch `https://codeload.github.com/{owner}/{repo}/tar.gz/{ref}`; the response body is saved into the workspace as `repo.tar.gz`.

Findings are shown in full, including any a reviewer dismissed and why. Scanning reduces risk; it does not prove this version safe.

Capabilities

network: 2 hostsfs write: workspacefs read: workspaceexec: tardata: codemcp servers: 1

Declared capabilities are a contract from the author: what this release says it needs, and what scanning and policy check against. The registry cannot enforce them while your QuickAgent runs.

Provenance

Archive digest: sha256:74cd902fc41e83669be5a6ac6ce59babc36522165f16f24bea8c919606a4794a
Report digest: sha256:115e1b755219a6c771f065bf0c6854274c6038f45b3428a3e2b8a162e401e129
Attestation: signed (DSSE)
Signing key: -_Ea_eEb6AVt8DSP

agentry verify blaktron/vuln-reachability-audit@0.2.0

Check the key id against the registry's published set at /.well-known/agentry/signing-keys.json. A signature proves who built this release, not that its contents are safe.

Manifest

The manifest as the registry validated and stored it, in canonical JSON.

{
  "name": "vuln-reachability-audit",
  "tags": [
    "vulnerabilities",
    "cve",
    "osv",
    "reachability",
    "dependency-audit",
    "html-report",
    "github"
  ],
  "guide": {
    "task": "e.g. Audit this repo's dependencies and tell me which CVEs are actually reachable from our code.",
    "files": "For a local disk scan (leave the repository URL blank): add the dependency manifests and lockfiles (package.json, package-lock.json, requirements.txt, pyproject.toml, go.mod, go.sum, Cargo.toml, Cargo.lock, pom.xml, Gemfile.lock, composer.lock) and the source files you want reachability assessed on.",
    "prepare": [
      "The GitHub repository URL (public); optionally pin a branch or tag in the task.",
      "For a local disk scan instead: the dependency manifests and lockfiles (package-lock.json, go.sum, Cargo.lock, uv.lock, ...) plus the source code.",
      "For a local monorepo scan, include every workspace's manifest and lockfile.",
      "For a local scan of a large codebase, add at least the files that import the dependencies you care about."
    ],
    "overview": "Downloads the GitHub repository you name (or scans the files you add when no URL is given), audits its dependencies against OSV.dev, then reads the source to judge whether each found vulnerability is reachable from your code. Returns reports/vuln-reachability.html: a self-contained HTML report, worst first, with reachability verdicts, path:line evidence, and fix suggestions."
  },
  "modes": [
    "autonomous"
  ],
  "intake": [
    {
      "id": "repository_url",
      "prompt": "GitHub repository URL to download and audit (leave blank for a local disk scan)"
    }
  ],
  "license": "MIT",
  "publish": {
    "include": [
      "agent.yaml",
      "AGENT.md",
      "README.md",
      "LICENSE"
    ]
  },
  "runtime": {
    "interfaces": [
      "claude-skill",
      "agents-md"
    ]
  },
  "summary": "Downloads a GitHub repository, audits its dependencies against OSV.dev, and returns an HTML reachability report with fix suggestions.",
  "version": "0.2.0",
  "namespace": "blaktron",
  "entrypoints": {
    "instruction": "AGENT.md"
  },
  "capabilities": {
    "exec": {
      "commands": [
        "tar"
      ]
    },
    "network": {
      "egress": [
        "api.github.com",
        "codeload.github.com"
      ]
    },
    "dataAccess": [
      "code"
    ],
    "filesystem": {
      "read": "workspace",
      "write": "workspace"
    },
    "mcpServers": [
      {
        "npm": "@cyanheads/osv-advisory-mcp-server",
        "tools": [
          "osv_query_batch",
          "osv_get_vulnerability",
          "osv_list_ecosystems"
        ],
        "egress": [
          "api.osv.dev"
        ],
        "version": "0.1.15"
      }
    ]
  },
  "schemaVersion": "2"
}