bx33661/oh-my-vul/omv-disclose

Claude Code and agent skill by bx33661/oh-my-vul

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Helps prepare responsible disclosure communications and timelines from an Evidence.v1 finding. Use when the user asks to contact a vendor, create initial/follow-up/deadline disclosure email templates, plan a 90-day timeline, record disclosure fields, or invokes `/omv-disclose`.

Install

npx vskill@latest install bx33661/oh-my-vul/omv-disclose

SKILL.md

omv-disclose

Prepare local responsible disclosure material after a finding is report-ready.

Invocation

text
/omv-disclose <id>
/omv-disclose timeline <id> [--days N]

Workflow

  1. Read .omv/findings/<id>.yaml using contracts/evidence.v1.yaml as the local schema reference.
  2. Identify vendor type: individual maintainer, company, foundation, or unknown.
  3. Generate three templates: initial contact, follow-up, and disclosure deadline reminder.
  4. Use omv disclose timeline <id> for 90-day milestones or --days N for a custom window.
  5. Ask before writing Evidence.v1 disclosure fields.

Template Requirements

Include package name, affected versions, impact summary, reproduction summary, suggested coordination deadline, and contact metadata. Avoid exploit payload expansion beyond what the existing Evidence.v1 reproducer already states.

Local State

Submission bookkeeping belongs in .omv/submissions/<id>.yaml through omv submissions and follows contracts/submission.v1.yaml. Research notes belong in .omv/notes/<id>.md. Treat both as private local state until sanitized.

Security

  • Security scanPassed, 95 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

Repository stars
4
7-day trend score
8

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/bx33661/oh-my-vul/omv-disclose/badge)](https://verified-skill.com/skills/bx33661/oh-my-vul/omv-disclose)

Something wrong with this skill or its page? Tell us.