package-risk-summary

What problem does it solve?

This Skill allows users to quickly summarize the risk profile of a specific package version, including vulnerabilities, malware, typosquat signals, package scores, license notes, recommended next checks, and data gaps.

Core Features & Use Cases

• Risk Profile Summary: Offers a concise, evidence-backed risk summary for a given package version.
• Vulnerability Detection: Identifies known vulnerabilities and risks associated with the package.
• License Information: Provides license-related information, including license type and potential issues.
• Use Case: When a user needs to quickly assess the risk associated with a particular package version in their project.

Quick Start

Use the @package-risk-summary agent to summarize the risk for a package version, e.g., "Summarize npm lodash 4.17.20 risk".