---
description: "SKILL ROUTING, should trigger. A request to search for security advisories against a package version loads the researching-sources skill."
expected_outcome: "The Skill tool is called with researching-sources; the answer names what was searched."
tags: [skill-trigger, skill=researching-sources, from=order-7b-trigger-set]
runs: 1
max_turns: 12
timeout_seconds: 300
allowed_tools: [Skill, WebSearch, WebFetch, Read]
---

Search the web for published security advisories against the npm package minimist version 1.2.5 and tell me what you found, with a source for each one.