SkillsMay 12, 2026·2 min read

VULNRΞPO — Privacy-First Vuln Report Manager (Ollama)

VULNRΞPO is a client-side vulnerability report manager: it encrypts data in-browser, supports imports/exports, and can use local Ollama for AI writing.

AI Open Source
AI Open Source · Community
Agent ready

Ready-to-run agent install

This asset can be installed after the agent chooses its runtime, checks the plan, and runs the matching command.

Native · 98/100Policy: allow
Agent surface
Any MCP/CLI agent
Kind
Skill
Install
Single
Trust
Trust: Established
Entrypoint
Asset
Direct install command
npx -y tokrepo@latest install 53eb09a2-04a5-5988-851a-030c1ecc3367 --target codex

Run after dry-run confirms the install plan.

Intro

VULNRΞPO is a client-side vulnerability report manager: it encrypts data in-browser, supports imports/exports, and can use local Ollama for AI writing.

  • Best for: Security pros who want local-first, encrypted report workflows (no default backend)
  • Works with: Modern browsers (IndexedDB); optional local Ollama for AI writing; Docker image for quick trial (per README)
  • Setup time: 3–10 minutes

Practical Notes

  • GitHub: 555 stars · 118 forks; pushed 2026-05-11 (verified via GitHub API).
  • README security model: PBKDF2-SHA-256 with 600,000 iterations + AES-256-GCM; key kept in-memory only.
  • README notes Angular 21 and a Docker image (kac89/vulnrepo) for a one-command local run.

Main

A good way to adopt VULNRΞPO:

  1. Use it as your single source of truth for issues, templates, and exports; treat your scanner outputs as inputs.
  2. For collaboration, prefer encrypted HTML exports or portable encrypted exports, then share via your normal channels.
  3. If you enable AI assistance, keep it local: the README documents an Ollama integration and notes that no data is sent to cloud services in that mode.
  4. For teams that need centralized storage, consider the optional backend path—just treat it as an integration, not a requirement.

The main benefit is reduced “report friction”: templates + imports + exports in one place, while keeping encryption and storage local by default.

FAQ

Q: Does it require a backend? A: No. README says data is encrypted and stored locally in your browser by default; backend is optional.

Q: Can I use AI without sending data to cloud? A: README documents using local Ollama for AI-assisted writing.

Q: What import formats are supported? A: README lists many sources (Burp, Nessus, Nmap, ZAP, Semgrep, Trivy, and more).

🙏

Source & Thanks

Source: https://github.com/kac89/vulnrepo > License: Apache-2.0 > GitHub stars: 555 · forks: 118

Discussion

Sign in to join the discussion.
No comments yet. Be the first to share your thoughts.

Related Assets

Meetily — Privacy-First AI Meeting Assistant with Local Transcription

An open-source, self-hosted AI meeting assistant that provides real-time transcription, speaker diarization, and local summarization using Whisper and Ollama, with no cloud dependency.

Skills
AI Open Source

Fathom Lite — Privacy-First Self-Hosted Web Analytics

A simple, privacy-focused, self-hosted web analytics tool built with Go and Preact that tracks pageviews without cookies or personal data collection.

Skills
AI Open Source

Remark42 — Privacy-Focused Self-Hosted Comment Engine

A lightweight, privacy-first commenting system that you host yourself, with no tracking, no ads, and full data ownership.

Skills
AI Open Source

GoatCounter — Privacy-Friendly Open Source Web Analytics

GoatCounter is a lightweight, privacy-respecting web analytics tool written in Go. It tracks page views without cookies, fingerprinting, or personal data collection, and can be self-hosted as a single binary.

Skills
AI Open Source
◈Home🔍Search👤Me