v0.3.0

publishedstablecli-upload

What the registry recorded: Ruleset 0.4.1 judged the review queue again: This version's findings are within the auto-publish threshold, so the gate published it.

Security report

9 findings

mediumhigh confidenceS9/capability-widened
Capability newly declared this release: fs-read
mediumhigh confidenceS9/capability-widened
Capability newly declared this release: fs-write

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: osv.dev

AGENT.md:5

You are a dependency-vulnerability analyst. You download the GitHub repository the person names into the workspace (or, when no URL is given, scan the files the

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: git@github.com

AGENT.md:27

   - Parse the URL. Accepted forms: `https://github.com/{owner}/{repo}`, optionally with a trailing `.git`, and `git@github.com:{owner}/{repo}.git`. Strip trail

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: github.com

AGENT.md:27

   - Parse the URL. Accepted forms: `https://github.com/{owner}/{repo}`, optionally with a trailing `.git`, and `git@github.com:{owner}/{repo}.git`. Strip trail

lowhigh confidenceS9/new-egress
New network egress host in this release: api.github.com
lowhigh confidenceS9/new-egress
New network egress host in this release: codeload.github.com

lowhigh confidenceS9/new-egress-content

New egress destination in package content: api.github.com

AGENT.md:28

   - Fetch `https://api.github.com/repos/{owner}/{repo}` and read `default_branch` and `archived` from the response. A 404 means the repository does not exist o

lowhigh confidenceS9/new-egress-content

New egress destination in package content: codeload.github.com

AGENT.md:29

   - Fetch `https://codeload.github.com/{owner}/{repo}/tar.gz/{ref}`; the response body is saved into the workspace as `repo.tar.gz`.

Findings are shown in full, including any a reviewer dismissed and why. Scanning reduces risk; it does not prove this version safe.

Capabilities

network: 2 hostsfs write: workspacefs read: workspacedata: codemcp servers: 1

Declared capabilities are a contract from the author: what this release says it needs, and what scanning and policy check against. The registry cannot enforce them while your QuickAgent runs.

Provenance

Archive digest: sha256:cd281138b13213059c64d36cda29334987a10f7ffb29f15f09588a6d103ef751
Report digest: sha256:b129511dfdfdca8e31a7cd1e75b4f8dd7170d0ff7f651f5bfe01ab39928ac5d4
Attestation: signed (DSSE)
Signing key: -_Ea_eEb6AVt8DSP

agentry verify blaktron/vuln-reachability-audit@0.3.0

Check the key id against the registry's published set at /.well-known/agentry/signing-keys.json. A signature proves who built this release, not that its contents are safe.

Manifest

The manifest as the registry validated and stored it, in canonical JSON.

{
  "name": "vuln-reachability-audit",
  "tags": [
    "vulnerabilities",
    "cve",
    "osv",
    "reachability",
    "dependency-audit",
    "html-report",
    "github"
  ],
  "guide": {
    "task": "e.g. Audit this repo's dependencies and tell me which CVEs are actually reachable from our code.",
    "files": "For a local disk scan (leave the repository URL blank): add the dependency manifests and lockfiles (package.json, package-lock.json, requirements.txt, pyproject.toml, go.mod, go.sum, Cargo.toml, Cargo.lock, pom.xml, Gemfile.lock, composer.lock) and the source files you want reachability assessed on.",
    "prepare": [
      "The GitHub repository URL (public); optionally pin a branch or tag in the task.",
      "For a local disk scan instead: the dependency manifests and lockfiles (package-lock.json, go.sum, Cargo.lock, uv.lock, ...) plus the source code.",
      "For a local monorepo scan, include every workspace's manifest and lockfile.",
      "For a local scan of a large codebase, add at least the files that import the dependencies you care about."
    ],
    "overview": "Downloads the GitHub repository you name (or scans the files you add when no URL is given), audits its dependencies against OSV.dev, then reads the source to judge whether each found vulnerability is reachable from your code. Returns reports/vuln-reachability.html: a self-contained HTML report, worst first, with reachability verdicts, path:line evidence, and fix suggestions."
  },
  "modes": [
    "autonomous"
  ],
  "intake": [
    {
      "id": "repository_url",
      "prompt": "GitHub repository URL to download and audit (leave blank for a local disk scan)"
    }
  ],
  "license": "MIT",
  "publish": {
    "include": [
      "agent.yaml",
      "AGENT.md",
      "README.md",
      "LICENSE"
    ]
  },
  "summary": "Downloads a GitHub repository, audits its dependencies against OSV.dev, and returns an HTML reachability report with fix suggestions.",
  "version": "0.3.0",
  "namespace": "blaktron",
  "entrypoints": {
    "instruction": "AGENT.md"
  },
  "capabilities": {
    "exec": "none",
    "network": {
      "egress": [
        "api.github.com",
        "codeload.github.com"
      ]
    },
    "dataAccess": [
      "code"
    ],
    "filesystem": {
      "read": "workspace",
      "write": "workspace"
    },
    "mcpServers": [
      {
        "npm": "@cyanheads/osv-advisory-mcp-server",
        "tools": [
          "osv_query_batch",
          "osv_get_vulnerability",
          "osv_list_ecosystems"
        ],
        "egress": [
          "api.osv.dev"
        ],
        "version": "0.1.15"
      }
    ]
  },
  "schemaVersion": "2"
}