Scan Python and Node.js packages with Sigil before installation.
npx skills add https://github.com/NOMARJ/sigil --skill scan-package
Please help me install this Agent Skill. Skill: scan-package Source: https://github.com/NOMARJ/sigil/tree/main/plugins/claude-code/skills/scan-package Command: npx skills add https://github.com/NOMARJ/sigil --skill scan-package
This Skill helps teams identify and block risky Python (pip) and Node.js (npm) packages before installation, reducing supply chain risk and potential agent compromise.
Run Sigil to scan a package before installation and review the findings.
High-intent search queries and answers about installing and using this skill.
To scan npm and pip packages for security risks before installation, you can apply a pre-install scanning workflow using the Sigil CLI to automatically identify and block risky packages during dependency updates.
A package pre-install scan flags risky patterns such as install hooks, unauthorized network calls, and credential access attempts to prevent supply chain attacks and potential agent compromise.
Yes, you need the Sigil CLI to run pre-install scans for Node.js and Python projects, as it executes the package analysis to enforce safe behavior before npm or pip installations proceed.
You should use a pre-install package scan during dependency updates, new package installations, or npm installs to ensure safe behavior and reduce supply chain risk before packages are added to your project.
You can block risky Node.js packages before installation by enforcing a pre-install scan that identifies install hooks, network calls, and credential access patterns using the Sigil CLI.
NOMARJDetect malicious patterns in repositories, packages, MCP servers, and AI skills.
karimatayutaAudit, update, and secure Python dependencies using uv and pyproject.toml.
skillsets-ccInstall the Valence Claude Code workflow into a project directory.
DCx7C5Automate Snyk-based scans of package manifests and lockfiles in CI/CD pipelines.
