omv-reportlisted

Generate a complete, ready-to-submit VulDB vulnerability report and CVE request. Covers all major package ecosystems: npm, pip, Go, Cargo (Rust), RubyGems, Maven, Gradle, NuGet, Composer (PHP), CocoaPods, Swift Package Manager, pub (Dart/Flutter), Hex (Elixir), CPAN (Perl), CRAN (R), LuaRocks. Use this skill whenever the user wants to submit a vulnerability to VulDB, request a CVE, write a security advisory, or document a security bug for disclosure. Trigger on phrases like submit to VulDB, request a CVE, write a CVE report, help me report this vuln, 提交 VulDB, 申请 CVE, 帮我报这个漏洞. Also trigger proactively when the user has just finished analysing a vulnerability in any package ecosystem and asks what to do next.
bx33661/oh-my-vul · ★ 3 · Data & Documents · score 69

Install: claude install-skill bx33661/oh-my-vul

# VulDB Report Generator ## References Load these when needed — do not load all at once: - **`references/ecosystems.md`** — vendor naming rules, version verification commands, duplicate CVE search databases, CWE→Class mapping. Read when ecosystem-specific details are needed. - **`references/shared/cvss-builder.md`** — metric-by-metric CVSS v3.1 decision table with common vector combinations. Read when computing the CVSS score. - **`contracts/evidence.v1.yaml`** — structured input contract from `omv-find`; read when the user provides a handoff packet or asks to continue from finder results. - **`contracts/verification.v1.yaml`** — adversarial review sidecar. Read when `.omv/verifications/<id>.yaml` exists or the user asks for a high-confidence report. - **`contracts/source-ref.v1.yaml`** — optional local source identity sidecar. Read when `.omv/sources/<id>.yaml` exists; a locator is recorded input, not proof of remote authenticity. - **`contracts/report-provenance.v1.yaml`** — generated report input manifest shape used by `omv report provenance`. - **`references/report-templates.md`** — reusable VulDB, GHSA, OSV, and standalone Markdown advisory templates. Read when the user requests a specific report format. - **`references/examples/xss-npm.md`** — complete filled report for a click-triggered XSS in an npm package. - **`references/examples/path-traversal-go.md`** — complete filled report for an unauthenticated path traversal in a Go module. - **`references/examples/protot