Run2 find trivy and cache

Skill cxcscmu/SkillLearnBench/skills/b3-teacher-feedback-claude-sonnet-4-6/dependency-vulnerability-check/run2_find-trivy-and-cache

[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.

Install

npx -y skills add cxcscmu/SkillLearnBench --skill run2_find-trivy-and-cache

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Use this skill first to locate the trivy binary and its pre-downloaded vulnerability database cache on the system before running any security audit.

SKILL.md

0.9 KB, as published. Nobody here has run it

Find Trivy Binary and Cache Directory

Step 1: Check if Trivy is available

which trivy
trivy --version

Step 2: Locate trivy database cache

# Check common cache locations
ls /root/trivy-cache/ 2>/dev/null
ls /home/trivy-cache/ 2>/dev/null
ls ~/.cache/trivy/ 2>/dev/null

# Find trivy.db anywhere on the system
find / -name "trivy.db" 2>/dev/null
find / -name "metadata.json" -path "*/trivy/*" 2>/dev/null

# Also check for fanal db
find / -name "fanal.db" 2>/dev/null

Step 3: Record the cache directory path

Note the directory that contains trivy.db. This will be passed as --cache-dir to trivy commands. Common paths: