Connect OSV to Your AI Agent

Use an AI assistant with OSV to check known package vulnerabilities and explain complete vulnerability records.

2 tools No auth

Try a OSV Task

Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.

oo Skill OSV

Check a Package Version

Query known vulnerabilities for a package version and summarize returned findings.

/oo OSV: Check [package] version [version] in ecosystem [ecosystem] for known OSV vulnerabilities.

Read a Vulnerability Record

Retrieve a complete OSV record and explain affected ranges and references.

/oo OSV: Get vulnerability [ID] and explain its affected packages, version ranges and references.

Start Working with OSV

  1. Install OOMOL

    Set up oo CLI and the oo Skill in your agent.

    Install OOMOL →
  2. Connect OSV

    Connect without credentials; OSV uses public vulnerability data.

    Connect OSV →
  3. Give Your Agent a Task

    Use /oo with the pages to read, the changes to make, and where to save the result.

    Connection Guide →

Choose Your Agent

  • An ecosystem, package name and optional exact version to check.
  • Specify the ecosystem, package name and version when checking affected versions. No returned vulnerability does not prove that a package is free of security issues.

OSV Tools

Use an AI assistant with OSV to check known package vulnerabilities and explain complete vulnerability records.

Check a Package Version

Query known vulnerabilities for a package version and summarize returned findings.

Read a Vulnerability Record

Retrieve a complete OSV record and explain affected ranges and references.

2 tools

Query Vulnerabilities

Find known vulnerabilities associated with a package or affecting a specific package version.

osv.query_vulnerabilities

Get Vulnerability

Get the complete OSV record for a vulnerability identifier.

osv.get_vulnerability

Frequently Asked Questions

Can I read the complete advisory?

Yes. Use the vulnerability ID with get_vulnerability to retrieve the complete OSV record.

How do I connect OSV?

Connect without credentials; OSV uses public vulnerability data.

What should I specify in my request?

Specify the ecosystem, package name and version when checking affected versions. No returned vulnerability does not prove that a package is free of security issues.

Connect OSV

About OSV ↗