AI Skill for Deep Audits: Enhance Omv-Reports with Omv-Audit

AI Skill for Deep Audits: Enhance Omv-Reports with Omv-Audit

The AI Skill for Deep Audits facilitates in-depth analysis of candidate findings from an Evidence.v1 file. It serves developers requiring deeper investigation into a finding already identified through an omv-find result, aiming to substantiate or refute a vulnerability, populate Evidence.v1 fields for omv-report, or when invoking the /omv-audit command.

What this skill does

• Analyzes .omv/findings/<id>.yaml files to either confirm or block the candidate findings.
• Populates all necessary evidence fields within the Evidence.v1 framework.
• Operates strictly in a passive research mode, utilizing local analysis and static reasoning.
• Disallows interaction with live services and does not execute proof-of-concept code automatically.
• Offers a force audit option with the --force flag to re-audit already confirmed or blocked findings.
• References various supporting documents for methodology, threat mapping, and verification as needed.

Who it is for

This skill is designed for developers and teams working with AI coding agents such as Claude Code, Cursor, and Codex, who engage in vulnerability research and require comprehensive auditing capabilities.

Use cases

• A developer needing to verify the presence of a security vulnerability identified in a codebase.
• A security researcher aiming to complete specific evidence fields to prepare an omv-report.
• Teams performing authorised security testing and defensive research in support of educational purposes.

Technical details

• Capable of integrating with AI agents like Claude Code, Cursor, and Codex.
• Accessible via the /omv-audit command to initiate the analysis process.
• Leverages external resources like audit-playbook.md, cvss-builder.md, and various pattern pack manifests for guidance.

For authorised security testing, defensive research and educational use only.

Source & Licence

This package is built on open-source work published by bx33661 (bx33661/oh-my-vul) and distributed under MIT. The original licence text and copyright notice are included in your download.

Personal and commercial use, modification and redistribution are permitted, provided the original copyright and licence notice are retained.

Your purchase covers curation, licence verification, packaging, documentation and instant delivery. It does not grant exclusive rights to the underlying open-source code, which remains available under its original licence.

Delivery & Support

• Delivery: instant — a secure download link is emailed to you as soon as payment is confirmed.
• Format: ZIP archive containing the skill files, documentation and the original licence.
• Support: support@mcpcart.com — we aim to reply within 2 business days.
• Updates: updates are included only where stated on this page.

Refunds

This is a digital product delivered immediately after purchase. By completing your order you request immediate delivery and acknowledge that, once the download has been accessed, the statutory right to cancel no longer applies to the extent permitted by law. Refund requests are handled in accordance with our published Refund Policy.

Claude, Codex, Gemini and Cursor are trademarks of their respective owners. MCP Cart is an independent marketplace and is not affiliated with, endorsed by, or sponsored by any of them. Compatibility references describe interoperability only.