ghost-scan-deps

Malicious tool definition detected

Tool: README.md Description: # Ghost SCA Scanner AI-powered Software Composition Analysis (SCA) scanner that detects exploitable vulnerabilities in your dependencies. Uses [wraith](https://github.com/ghostsecurity/wraith) for vulnerability detection with AI analysis to filter false positives.

Malicious tool definition detected

Tool: SKILL.md Description: --- name: "ghost-scan-deps" description: | Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance.

Malicious tool definition detected

Tool: agents/analyze/agent.md Description: # Analysis Agent You are the analysis orchestrator.

Malicious tool definition detected

Tool: agents/analyze/analyzer.md [1/2] Description: # Analyzer Agent You are an exploitability analysis agent. Your job is to determine whether a detected vulnerability is actually exploitable in the target codebase.

Tool: agents/analyze/analyzer.md [2/2] Description: blast radius (affects only single user, not system-wide) **Downgrade to CLEAN if:** - Vulnerability requires features/functions not used - Attack vector is completely mitigated - Code is test-only or never deployed **Example Adjustments:** ``` Base: CVSS 9.8 (HIGH) - Remote code execution Context: Requires admin authentication + input validation present Adjusted: MEDIUM - Limited attack surface, requires privileged access Base: CVSS 5.3 (MEDIUM

Malicious tool definition detected

Tool: agents/analyze/template-finding.md Description: # SCA Finding: <vuln_id> in <package_name> ## Metadata - **ID**: <finding_id> - **Type**: sca-vulnerability - **Package**: <package_name>@<version> - **Ecosystem**: <ecosystem> - **Vulnerability ID**: <vuln_id> - **CVEs**: <cve_list> - **Severity**: <high|medium|low> - **Status**: confirmed-exploitable ## Location - **Lockfile**: <relative/path/to/lockfile> - **Package**: <package_name>@<version> - **Ecosystem**: <ecosystem> ## Vulnerability

Malicious tool definition detected

Tool: agents/discover/agent.md Description: # Discover Agent You are the discovery agent.

Malicious tool definition detected

Tool: agents/init/agent.md Description: # Init Agent You are the initialization agent.

Malicious tool definition detected

Tool: agents/scan/agent.md Description: # Scan Agent You are the scanner agent.

Malicious tool definition detected

Tool: agents/summarize/agent.md Description: # Summarize Agent You are the summarization agent.

Malicious tool definition detected

Tool: agents/summarize/template-report.md [1/2] Description: # SCA Vulnerability Scan Report ## Scan Information - **Repository**: <repo_path> - **Scan ID**: <scan_id> - **Date**: <timestamp> - **Scanner**: Wraith (OSV-Scanner) + Ghost AI Exploitability Analysis --- ## Executive Summary <2-3 paragraphs summarizing: - Number of lockfiles scanned and total dependencies analyzed - High severity findings that require immediate action - Overall security posture (clean, concerning, critical) - False p

Tool: agents/summarize/template-report.md [2/2] Description: evaluating: 1.