domains / families / security / aeon-vuln-scanner

aeon-vuln-scanner

separate

Audit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed dependency CVEs. Semgrep + TruffleHog + osv-scanner + Slither with reachability triage. Skips targets that have no safe disclosure channel. Triggers: "vuln scan owner/repo", "audit this repo", "responsible-disclosure scan", "check for secret leaks", "scan dependencies for CVEs".

When to use

• vuln scan owner/repo
• audit this repo
• responsible-disclosure scan
• check for secret leaks
• scan dependencies for CVEs

When not to use

• intentionally vulnerable teaching repos
• CTF repositories
• targets without a safe disclosure channel

Skill page

Source