skills.rest
kfolkes
kfolkesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

guarddog-security-scan

Scans Python and Node.js packages for malicious code and supply chain attacks.

2|Updated Mar 11, 2026
Search Tags:#security#python#nodejs#malware detection#dependency scanning#guarddog#supply chain attacks
One-click install
npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill guarddog-security-scan-kfolkes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: guarddog-security-scan
Source: https://github.com/kfolkes/dotnet-modernization-db-transform/tree/main/sec-check/.github/skills/guarddog-security-scan
Command: npx skills add https://github.com/kfolkes/dotnet-modernization-db-transform --skill guarddog-security-scan-kfolkes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill protects your projects by automatically scanning Python and Node.js dependencies for malicious code, supply chain attacks, and security vulnerabilities before installation.

Core Features & Use Cases

  • Dependency Auditing: Verifies requirements.txt, package.json, and package-lock.json for compromised packages.
  • Malware Detection: Identifies threats like data exfiltration, reverse shells, typosquatting, and obfuscated payloads.
  • Pre-installation Checks: Scans remote PyPI or npm packages to ensure they are safe to add to your project.
  • Use Case: Before adding a new third-party library to your project, use this Skill to scan it for any signs of malware or malicious intent, preventing potential security breaches.

Quick Start

Use the guarddog-security-scan skill to verify all dependencies listed in your requirements.txt file.

Frequently Asked Questions about guarddog-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Python dependencies in requirements.txt for malware and supply chain attacks?▼

To scan Python dependencies for malware and supply chain attacks, you can audit your requirements.txt file to detect compromised packages, data exfiltration, and obfuscated payloads before installation.

Can I check npm packages for malicious code before adding them to my project?▼

Yes, you can scan remote npm packages and package-lock.json files for malicious code, typosquatting, and reverse shells to ensure dependencies are safe before adding them to your project.

What types of security threats can dependency scanning detect in Node.js and Python packages?▼

Dependency scanning detects various security threats in Node.js and Python packages, including malware, data exfiltration, reverse shells, typosquatting, and compromised maintainers.

How do I export dependency scan results for CI/CD automation?▼

You can export dependency scan results for CI/CD automation by outputting the security findings in structured JSON or SARIF formats, which are supported for automated processing.

Do I need to install GuardDog to scan for malicious code in package-lock.json?▼

Yes, installing GuardDog is required to scan package-lock.json and other dependency files for malicious code and supply chain attacks using this security scanning functionality.

Related Skills

Explore More Software Engineering Skills→
micaelmaltamicaelmalta
1

dependencies

Automate dependency upgrades and lockfile synchronization across Node, Python, Go, Rust, and Ruby projects.

Community
Intermediate
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
devendrapratapsinghdevendrapratapsingh
1

app-security

Scan application code for vulnerabilities and hardcoded secrets.

Community
Advanced
zzw4257zzw4257

OWASP Dependency-Check

Scan project dependencies for known vulnerabilities using OWASP Dependency-Check.

Community
Intermediate