v0.5.0

publishedstablecli-upload

What the registry recorded: This version's findings are within the auto-publish threshold, so the gate published it.

Security report

8 findings

mediumhigh confidenceS9/capability-widened
Capability newly declared this release: env

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: osv.dev

AGENT.md:5

You are a dependency-vulnerability analyst. You read a project's dependency manifests and lockfiles, either from a public GitHub repository or from files the pe

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: git@github.com

AGENT.md:10

- **Intake `repository_url`** (in `/inputs/intake.json`): a GitHub repository. Accepted forms: `https://github.com/{owner}/{repo}` (optionally ending `.git` or

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: github.com

AGENT.md:10

- **Intake `repository_url`** (in `/inputs/intake.json`): a GitHub repository. Accepted forms: `https://github.com/{owner}/{repo}` (optionally ending `.git` or

lowhigh confidenceS9/new-egress
New network egress host in this release: api.github.com
lowhigh confidenceS9/new-egress
New network egress host in this release: raw.githubusercontent.com

lowhigh confidenceS9/new-egress-content

New egress destination in package content: api.github.com

AGENT.md:26

   - `fetch` `https://api.github.com/repos/{owner}/{repo}`. Read `default_branch`, `archived`, `private` and `size`. A 404 stops the run as above; a 403 or 429

lowhigh confidenceS9/new-egress-content

New egress destination in package content: raw.githubusercontent.com

AGENT.md:31

   - File contents come from `https://raw.githubusercontent.com/{owner}/{repo}/{ref}/{path}` (percent-encode spaces and unusual characters in the path). One req

Findings are shown in full, including any a reviewer dismissed and why. Scanning reduces risk; it does not prove this version safe.

Capabilities

network: 2 hostssecrets: 1data: codemcp servers: 1

Declared capabilities are a contract from the author: what this release says it needs, and what scanning and policy check against. The registry cannot enforce them while your QuickAgent runs.

Provenance

Archive digest: sha256:cd90621e1a264fa14e72345adb99e354b6ece89a3982c6a87c3860a8b15f4de3
Report digest: sha256:c0df22d1f389405ba7d03927f339e165a5fafced13affc9f534086094327c0b4
Attestation: signed (DSSE)
Signing key: -_Ea_eEb6AVt8DSP

agentry verify blaktron/vuln-reachability-audit@0.5.0

Check the key id against the registry's published set at /.well-known/agentry/signing-keys.json. A signature proves who built this release, not that its contents are safe.

Manifest

The manifest as the registry validated and stored it, in canonical JSON.

{
  "name": "vuln-reachability-audit",
  "tags": [
    "vulnerabilities",
    "cve",
    "osv",
    "reachability",
    "dependency-audit",
    "html-report",
    "github"
  ],
  "guide": {
    "task": "e.g. Audit this repo's dependencies and tell me which CVEs are actually reachable from our code.",
    "files": "To scan files instead of a repository (leave the URL blank): add the manifests and lockfiles (package.json, package-lock.json, requirements.txt, go.mod, go.sum, Cargo.lock, pom.xml, Gemfile.lock, composer.lock) and the source files, or a zip of them.",
    "connect": {
      "GITHUB_TOKEN": "Optional. Without it only public repositories can be read, within GitHub's unauthenticated hourly limit. To audit a private repository or lift the limit, create a GitHub token with read-only access to the repository's contents."
    },
    "prepare": [
      "The GitHub repository URL; optionally name a branch, tag or commit in the task.",
      "For a file scan instead: the dependency manifests and lockfiles (package-lock.json, go.sum, Cargo.lock, uv.lock, ...) plus the source code.",
      "For a monorepo file scan, include every workspace's manifest and lockfile.",
      "For full reachability coverage of a large repository, add it as a zip or add the files that import the dependencies you care about."
    ],
    "overview": "Reads the public GitHub repository you name (or scans the files you add when no URL is given), audits its dependencies against OSV.dev, then reads the source to judge whether each found vulnerability is reachable from your code. Returns reports/vuln-reachability.html: a self-contained HTML report, worst first, with reachability verdicts, path:line evidence, and fix suggestions."
  },
  "modes": [
    "autonomous"
  ],
  "intake": [
    {
      "id": "repository_url",
      "prompt": "GitHub repository URL to audit (leave blank to scan the files you add)"
    }
  ],
  "license": "MIT",
  "publish": {
    "include": [
      "agent.yaml",
      "AGENT.md",
      "README.md",
      "LICENSE"
    ]
  },
  "runtime": {
    "interfaces": [
      "claude-skill",
      "agents-md"
    ]
  },
  "summary": "Reads a GitHub repository or your files, audits dependencies against OSV.dev, and returns an HTML reachability report with fix suggestions.",
  "version": "0.5.0",
  "namespace": "blaktron",
  "entrypoints": {
    "instruction": "AGENT.md"
  },
  "capabilities": {
    "exec": "none",
    "network": {
      "egress": [
        "api.github.com",
        "raw.githubusercontent.com"
      ]
    },
    "secrets": [
      "GITHUB_TOKEN"
    ],
    "dataAccess": [
      "code"
    ],
    "filesystem": {
      "read": "none",
      "write": "none"
    },
    "mcpServers": [
      {
        "npm": "@cyanheads/osv-advisory-mcp-server",
        "tools": [
          "osv_query_batch",
          "osv_get_vulnerability",
          "osv_list_ecosystems"
        ],
        "egress": [
          "api.osv.dev"
        ],
        "version": "0.1.15"
      }
    ],
    "optionalSecrets": [
      "GITHUB_TOKEN"
    ]
  },
  "schemaVersion": "2"
}