rush_security
Scan project dependencies at a given path for known vulnerabilities with pip-audit for Python and npm audit for JS/TS. Returns status, findings, and summary to help fix security issues.
Instructions
Scan deps at for known vulnerabilities. Returns {status, findings[], summary}. Engines: pip-audit (Python), npm audit (JS/TS). status='skipped' means engine not on PATH.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| allow_slow | No | ||
| allow_build | No | ||
| allow_browser | No | ||
| allow_network | No | ||
| allow_download | No | ||
| allow_cache_write | No | ||
| allow_artifact_write | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| raw | No | ||
| tool | No | ||
| engine | No | ||
| status | No | ||
| metrics | No | ||
| summary | No | ||
| findings | No | ||
| metadata | No | ||
| artifacts | No | ||
| duration_ms | No | ||
| review_kind | No | ||
| engine_version | No | ||
| review_provider | No |