stackalarm

Type /stackalarm in your AI agent and get a straight answer about your project’s security today.

stackalarm is an agent skill and the CLI it relies on. Open a project in Claude Code, Codex, Cursor or another agent, run the skill, and the agent tells you what in this week’s security news affects this repository, how urgent it is, and what to change.

stackalarm.dev: what it does and an example answer. Documentation: the skill, every CLI option, the scheduled watch, the sources.

How it works

• The skill is the analyst. It reads the project (manifests, lockfiles, Dockerfiles, CI, git remotes), runs the CLI, completes it with a web search and your ecosystem’s audits (composer audit, npm audit, pip-audit, govulncheck…), judges what applies, and offers to fix what lives in the repository, one change at a time, after asking. It never pushes, deploys or touches a server.
• The CLI is its eyes. It reads more than 270 sources first-hand: project and vendor announcements, the GitHub Advisory Database, OSV.dev, the NVD and EUVD CVE databases, CERTs, CISA KEV, catalogs of public…