Audit npm and pip dependencies for vulnerabilities and malicious patterns.
npx skills add https://github.com/koach08/claude-code-skills --skill dep-audit-koach08
Please help me install this Agent Skill. Skill: dep-audit Source: https://github.com/koach08/claude-code-skills/tree/main/skills/security/dep-audit Command: npx skills add https://github.com/koach08/claude-code-skills --skill dep-audit-koach08
This skill addresses the critical risk of supply chain attacks and vulnerabilities in third-party packages by automating the detection of malicious code, typosquatting, and known security flaws.
Run the dep-audit skill to perform a comprehensive security scan of all dependencies and source code in the current directory.
High-intent search queries and answers about installing and using this skill.
To audit npm and pip dependencies for security vulnerabilities, you can run a comprehensive scan using standard package manager audit tools to identify packages with known CVEs and malicious supply chain patterns.
Typosquatting in npm packages is a supply chain attack where malicious packages are named similarly to popular ones. You can detect typosquatting, suspicious install scripts, and anomalous dependency behavior by running an automated security audit.
Scanning downloaded code templates for reverse shells and data exfiltration requires grep-based pattern matching to identify dangerous code execution, unauthorized filesystem access, and suspicious exfiltration attempts in the source files.
Yes, standard package manager audit tools can be used to find suspicious install scripts by applying pattern matching to detect anomalous dependency behavior, typosquatting, and unauthorized code execution during project initialization.
apacheScan project dependencies for known vulnerabilities and propose upgrades.
webrix-aiCorrelate CVE scan results with infrastructure to prioritize patching and create Jira tickets.
bugrabilgeDetect security vulnerabilities in code, running apps, and dependencies.
luissimon96Audit dependencies, generate SBOMs, and check license compliance for software projects.
