{"uid":"cap_x_tTrwDEdIWoFhqIt-dQB","slug":"citiview-agent-market-package-vulnerability-check-1e789e9d","name":"Citiview Agent Market — Package Vulnerability Check","description":"Package vulnerability check for coding agents: known CVEs/GHSAs for an npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet or Packagist package version, with severity, fixed versions and the latest release (OSV.dev).","url":"https://agents.citiviewgroup.com/v1/vulns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["package"],"properties":{"package":{"type":"string"},"version":{"type":"string"},"ecosystem":{"type":"string","description":"npm (default), pypi, go, maven, crates.io, rubygems, nuget, packagist"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3aGyMPDuh_u_8l1nlCynu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up known CVEs and GHSAs for a specific package version across npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, or Packagist, returning severity, fixed versions, and the latest release via OSV.dev.","exampleAgentPrompt":"Can you check whether lodash version 4.17.20 on npm has any known CVEs or GHSAs, and tell me the severity and what fixed versions are available?","exampleUseCases":[{"title":"Pre-deploy dependency security audit","prompt":"Before I ship this build, check if express version 4.17.1 on npm has any known vulnerabilities — I need the CVE IDs, severity, and the earliest fixed version."},{"title":"Python ML library vulnerability check","prompt":"Does numpy version 1.21.0 on PyPI have any known CVEs or GHSAs? If so, what's the severity and what version should I upgrade to?"},{"title":"Rust crate security review","prompt":"I'm using the serde crate version 1.0.130 from crates.io — are there any known security advisories against it, and what's the latest release I should be on?"}],"resultDescription":"Returns a list of known CVE and GHSA advisories matching the queried package and version, including severity level (e.g. CRITICAL, HIGH, MEDIUM, LOW), affected version ranges, versions where the issue is fixed, and the latest available release of the package — sourced from OSV.dev.","failureModes":["Package not found in the specified ecosystem — returns empty advisory list or 404","Version string malformed or not matching any release — may return no results","Unsupported ecosystem string — defaults to npm or returns an error","Network timeout or OSV.dev upstream unavailability — returns 5xx error","Payment not processed (x402 protocol) — request rejected before processing"],"whenToPreferThis":"Choose this endpoint when you need to quickly audit a single specific package version for known vulnerabilities across major ecosystems (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist) without standing up your own OSV.dev integration. It is ideal for coding agents performing inline dependency checks, CI/CD pipeline validation steps, or security triage on a specific library before use. Prefer it over general web searches for CVEs when you need structured, machine-readable advisory data with severity and fix metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-14T06:48:38.714Z","isFirstParty":false,"canonicalSlug":"citiview-agent-market-package-vulnerability-check-1e789e9d"}