Vulnetix

功能

• Vulnerability lookup and details
• Exploit intelligence analysis
• Package security risk assessment
• Context-aware remediation planning
• Repository impact analysis

使用场景

• Assessing the risk of a known CVE in your project.
• Discovering actively exploited vulnerabilities relevant to your technology stack.
• Evaluating the security of a new dependency before adding it.
• Generating a comprehensive remediation plan for a critical vulnerability.

非目标

• Automatically applying fixes without user confirmation.
• Performing actual exploit execution or security testing.
• Replacing manual security review processes entirely.

工作流

1. Load vulnerability memory and repository context.
2. Fetch vulnerability/exploit/package data from Vulnetix VDB.
3. Analyze repository impact (dependencies, code patterns, OS/container context).
4. Present structured findings (summary, exploit details, fix options).
5. Update vulnerability memory with new findings and analysis.
6. Provide actionable next steps for remediation or further investigation.

实践

• Vulnerability Management
• Security Analysis
• Code Quality
• Developer Productivity

先决条件

• Network access to Vulnetix VDB API
• Internet access for external API calls
• Optional: gh CLI for enhanced GitHub security integration