bx33661/oh-my-vul

oh-my-vul

<p align="center"> <strong>Evidence-first vulnerability research skills for Claude Code.</strong> </p> <p align="center"> <a href="https://github.com/bx33661/oh-my-vul/actions/workflows/validate.yml"><img src="https://github.com/bx33661/oh-my-vul/actions/workflows/validate.yml/badge.svg" alt="validate"></a> <a href="https://www.npmjs.com/package/oh-my-vul"><img src="https://img.shields.io/npm/v/oh-my-vul" alt="npm"></a> <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-green.svg" alt="license: MIT"></a> </p> <p align="center"> <a href="README.zh-CN.md">中文文档</a> · <a href="docs/vulnerability-research-best-practices.zh-CN.md">漏洞挖掘最佳实践</a> · <a href="RELEASE.md">Release Guide</a> </p>

Purpose: oh-my-vul helps you find promising open-source audit targets, keep the evidence organized, and turn confirmed findings into reviewer-friendly VulDB, CVE, GHSA, OSV, or Markdown advisory drafts.

Safety boundary: it is built for passive research and local verification. It does not encourage spraying exploit payloads, attacking live third-party services, or inventing vulnerabilities from weak evidence.

---

At A Glance

| Area | What it gives you | |---|---| | Target discovery | /omv-find ranks packages worth auditing and points to code-reading entry points. | | Evidence ledger | .omv/findings/*.yaml keeps structured Evidence.v1 research state. | | Audit workflow | /omv-audit proves or blocks candidate findings using source -> sink -> guard reasoning. | | Local reproduction | /omv-repro records user-observed local results and repro artifacts. | | Passive intelligence | /omv-radar and /omv-dedup track watchlist changes and duplicate advisory risk. | | Report drafting | /omv-report generates review-friendly advisory drafts from validated findings. | | Disclosure lifecycle | /omv-disclose, /omv-critic, and omv submissions ... cover pre-submit revi