Cve — Security skill for Claude Code
Find and fix dependency security vulnerabilities in one Cash-Track repo, then raise a remediation PR.
How to install Cve
Installs to ~/.claude/skills/cash-track-claude-plugin-cve/SKILL.md
mkdir -p ~/.claude/skills/cash-track-claude-plugin-cve && curl -fsSL https://raw.githubusercontent.com/cash-track/claude-plugin/HEAD/commands/cve.md -o ~/.claude/skills/cash-track-claude-plugin-cve/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Cve does
description: Find and fix dependency security vulnerabilities in one Cash-Track repo, then raise a remediation PR argument-hint:
Run the security upgrade workflow for the Cash-Track repository `$1`.
Valid values for `$1`: `api`, `frontend`, `website`, `infra`, `gateway`, `mysql`, `redis`, `mysql-backup`, `.github`.
If `$1` is empty, ask which repository before doing anything else.
Invoke the `cash-track:security-upgrade` skill and follow it exactly, using `$1` as the target re
Alternatives in Security
- FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
- Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
- Fix Secdeps — Audit and fix Dependabot security vulnerabilities across the monorepo 390 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Engage.Cvediff
Find the canonical fix commit(s) for a CVE across sources, then diff for root cause
Auto Package Migration
A Claude Code Skill that automates package upgrades, CVE remediation, and Jira-driven dependency maintenance a
Heeler Vulnerabilities Scan
Run Heeler dependency vulnerability scanning and policy gating. Use when the user asks for CVE analysis, sever
Cve Diff
CVE patch discovery — find, acquire, and diff the fix commit for a CVE
Levelup
Raise the project's gold level honestly — gold-audit → remediation wave → close each gap for real → re-audit b
App Audit
Grade an existing app against the Mobify Studio House KB and Axiom standards — fan out the specialist auditors
Related Agents
Dependency Doctor
Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps.
Ark Security Patcher
Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing
Remediation
Vulnerability Remediation Agent (SSDF RV.2.2). Write-capable implementer for confirmed vulnerabilities only. I