Cve Cache Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cve Cache Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Recent CVE + GHSA cache as a stdio MCP server.
Probe P-005 by weiseer.
Cached, structured snapshot of recent CVE + GitHub Security Advisory records — for AI agents auditing dependencies or screening new packages.
Your agent can:
lookup_cve — full record for one CVE/GHSA IDfind_for_package — all CVEs affecting a package by ecosystem (npm/PyPI/Cargo/Maven/Go)list_recent_critical — recent high-severity CVEs (default: 7-day, CVSS ≥ 7)severity_summary — counts by severity bucket| Agent DIY | cve-cache | |
|---|---|---|
| Source query | NVD JSON feeds + GHSA GraphQL | 1 MCP call |
| Token cost (NVD records are large) | $0.05-0.20 | $0 free / $0.00005 paid |
| Latency | 2-10 seconds | <100ms |
| Cross-ecosystem normalization | Per-source schema | Pre-normalized |
npm install -g @weiseer/cve-cache-mcp{
"mcpServers": {
"cve-cache": {
"command": "npx",
"args": ["-y", "@weiseer/cve-cache-mcp"]
}
}
}Apache-2.0. Catalog data: derived from public CVE/NVD/GHSA feeds (CC0/public domain).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.