Run2 find trivy and cache

Skill cxcscmu/SkillLearnBench/skills/b3-teacher-feedback-claude-sonnet-4-6/dependency-vulnerability-check/run2_find-trivy-and-cache

Use this skill first to locate the trivy binary and its pre-downloaded vulnerability database cache on the system before running any security audit.From its SKILL.md

Install

npx -y skills add cxcscmu/SkillLearnBench --skill run2_find-trivy-and-cache

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

0.9 KB, 227 tokens by cl100k_base, as published. Nobody here has run it

Find Trivy Binary and Cache Directory

Step 1: Check if Trivy is available

which trivy
trivy --version

Step 2: Locate trivy database cache

# Check common cache locations
ls /root/trivy-cache/ 2>/dev/null
ls /home/trivy-cache/ 2>/dev/null
ls ~/.cache/trivy/ 2>/dev/null

# Find trivy.db anywhere on the system
find / -name "trivy.db" 2>/dev/null
find / -name "metadata.json" -path "*/trivy/*" 2>/dev/null

# Also check for fanal db
find / -name "fanal.db" 2>/dev/null

Step 3: Record the cache directory path

Note the directory that contains trivy.db. This will be passed as --cache-dir to trivy commands. Common paths:

/root/trivy-cache
/root/.cache/trivy
/home/trivy-cache

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.