What problem does it solve? When a new CVE, breach, or malicious package advisory drops, you need to know quickly whether your machine and projects are affected without risking further damage. This Skill performs a strictly read-only exposure audit and produces a structured, dated report. ## Core Features & Use Cases - Read-only system checks: Runs parallel Bash checks across npm/pnpm/yarn, Python, Homebrew, running processes, listeners, LaunchAgents, environment variables, and VS Code extensions — never installing, removing, or modifying anything. - Structured audit reports: Writes a terse, factual Markdown report to ~/Documents/cyber/YYYY-MM-DD-<slug>.md with a check table, verdict (Not affected / Affected / Partially affected), and follow-ups. - Use Case: A supply-chain advisory names a malicious npm package. Ask the agent to check if you're affected; it greps your lockfiles and global modules, inspects running processes, and writes a dated report with a clear verdict and remediation commands for you to run yourself. ## Quick Start Ask the agent to audit your machine for a specific advisory, for example: "Check if I'm affected by the malicious version of package X and write a report."
