v0.6.0

publishedstablecli-upload

What the registry recorded: This version's findings are within the auto-publish threshold, so the gate published it.

Security report

8 findings

mediumhigh confidenceS9/capability-widened
Capability newly declared this release: env

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: osv.dev

AGENT.md:5

You are a dependency-vulnerability analyst. You read a project's dependency manifests and lockfiles, either from a GitHub repository or from files the person ad

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: git@github.com

AGENT.md:10

- **Intake `repository_url`** (in `/inputs/intake.json`): a GitHub repository. Accepted forms: `https://github.com/{owner}/{repo}` (optionally ending `.git` or

mediumhigh confidenceS9/new-egress-content

New egress destination in package content: github.com

AGENT.md:10

- **Intake `repository_url`** (in `/inputs/intake.json`): a GitHub repository. Accepted forms: `https://github.com/{owner}/{repo}` (optionally ending `.git` or

lowhigh confidenceS9/new-egress
New network egress host in this release: api.github.com
lowhigh confidenceS9/new-egress
New network egress host in this release: raw.githubusercontent.com

lowhigh confidenceS9/new-egress-content

New egress destination in package content: api.github.com

AGENT.md:12

- **Optional key `GITHUB_TOKEN`**: when it is set, send it with `fetch` through `auth` (`{"env": "GITHUB_TOKEN"}`) on every request to `api.github.com` and `raw

lowhigh confidenceS9/new-egress-content

New egress destination in package content: raw.githubusercontent.com

AGENT.md:12

- **Optional key `GITHUB_TOKEN`**: when it is set, send it with `fetch` through `auth` (`{"env": "GITHUB_TOKEN"}`) on every request to `api.github.com` and `raw

Findings are shown in full, including any a reviewer dismissed and why. Scanning reduces risk; it does not prove this version safe.

Capabilities

network: 2 hostssecrets: 1data: codemcp servers: 1

Declared capabilities are a contract from the author: what this release says it needs, and what scanning and policy check against. The registry cannot enforce them while your QuickAgent runs.

Provenance

Archive digest: sha256:62fc0778bfe7f620c52dd34413792591d9938a9c70e0cd527900be8ff76a4163
Report digest: sha256:e6f1d5f100ee5a8fdc9fd03831755814cd0dfd9b5b38b31765e00beeefd1db94
Attestation: signed (DSSE)
Signing key: -_Ea_eEb6AVt8DSP

agentry verify blaktron/vuln-reachability-audit@0.6.0

Check the key id against the registry's published set at /.well-known/agentry/signing-keys.json. A signature proves who built this release, not that its contents are safe.

Manifest

The manifest as the registry validated and stored it, in canonical JSON.

{
  "name": "vuln-reachability-audit",
  "tags": [
    "vulnerabilities",
    "cve",
    "osv",
    "reachability",
    "dependency-audit",
    "html-report",
    "github"
  ],
  "guide": {
    "task": "e.g. Audit this repo's dependencies and tell me which CVEs are actually reachable from our code.",
    "files": "To scan files instead of a repository (leave the URL blank): add the manifests and lockfiles (package.json, package-lock.json, requirements.txt, go.mod, go.sum, Cargo.lock, pom.xml, Gemfile.lock, composer.lock) and the source files, or a zip of them.",
    "connect": {
      "GITHUB_TOKEN": "Optional. Without it only public repositories can be read, within GitHub's unauthenticated hourly limit. To audit a private repository or lift the limit, create a GitHub token with read-only access to the repository's contents."
    },
    "prepare": [
      "The GitHub repository URL; optionally name a branch, tag or commit in the task.",
      "For a file scan instead: the dependency manifests and lockfiles (package-lock.json, go.sum, Cargo.lock, uv.lock, ...) plus the source code.",
      "For a monorepo file scan, include every workspace's manifest and lockfile.",
      "Large repositories take many requests; if a run stops early, the report names the source files it did not reach."
    ],
    "overview": "Reads the GitHub repository you name (or scans the files you add when no URL is given), audits its dependencies against OSV.dev, then reads every source file in the repository, one by one from GitHub, to judge whether each found vulnerability is reachable from your code. Returns reports/vuln-reachability.html: a self-contained HTML report, worst first, with reachability verdicts, path:line evidence, fix suggestions and a coverage line (N of M source files read)."
  },
  "modes": [
    "autonomous"
  ],
  "intake": [
    {
      "id": "repository_url",
      "prompt": "GitHub repository URL to audit (leave blank to scan the files you add)"
    }
  ],
  "license": "MIT",
  "publish": {
    "include": [
      "agent.yaml",
      "AGENT.md",
      "README.md",
      "LICENSE"
    ]
  },
  "runtime": {
    "interfaces": [
      "claude-skill",
      "agents-md"
    ]
  },
  "summary": "Reads a GitHub repository or your files, audits dependencies against OSV.dev, and returns an HTML reachability report with fix suggestions.",
  "version": "0.6.0",
  "namespace": "blaktron",
  "entrypoints": {
    "instruction": "AGENT.md"
  },
  "capabilities": {
    "exec": "none",
    "network": {
      "egress": [
        "api.github.com",
        "raw.githubusercontent.com"
      ]
    },
    "secrets": [
      "GITHUB_TOKEN"
    ],
    "dataAccess": [
      "code"
    ],
    "filesystem": {
      "read": "none",
      "write": "none"
    },
    "mcpServers": [
      {
        "npm": "@cyanheads/osv-advisory-mcp-server",
        "tools": [
          "osv_query_batch",
          "osv_get_vulnerability",
          "osv_list_ecosystems"
        ],
        "egress": [
          "api.osv.dev"
        ],
        "version": "0.1.15"
      }
    ],
    "optionalSecrets": [
      "GITHUB_TOKEN"
    ]
  },
  "schemaVersion": "2"
}