skills.rest
skylarsabo
skylarsaboCOMMUNITY
Explore all skills by this author →
GitHub

supply-chain-trust

Audit software supply chain dependencies for egress, CVEs, and build integrity.

Updated Jun 22, 2026
Search Tags:#security hardening#CVE analysis#dependency auditing#supply chain integrity#anonymity security
One-click install
npx skills add https://github.com/skylarsabo/code-ops --skill supply-chain-trust
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: supply-chain-trust
Source: https://github.com/skylarsabo/code-ops/tree/main/plugins/privacy-opsec-suite/skills/supply-chain-trust
Command: npx skills add https://github.com/skylarsabo/code-ops --skill supply-chain-trust

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

The Skill addresses the issue of vetting dependencies for potential risks, such as egress, CVEs, and build/lockfile integrity, to maintain anonymity and operational security.

Core Features & Use Cases

  • Dependency Inventory: Catalogs direct and transitive dependencies, their network behavior, known CVEs, and integrity.
  • Anonymity Risk Assessment: Evaluates egress/telemetry risks and provides alternatives or disable options.
  • Vulnerability and Integrity Checks: Identifies known CVEs, abandoned packages, and integrity issues.
  • Provenance and Content Scanning: Audits agent-ingested content for potential injection directives and secrets.

Quick Start

Run the 'supply-chain-trust' skill to assess your dependencies for risks.

Frequently Asked Questions about supply-chain-trust

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit software dependencies for known vulnerabilities and CVEs?▼

To audit dependencies for known vulnerabilities and CVEs, supply-chain-trust catalogs direct and transitive dependencies and validates them against known issues to provide remediation options for identified risks.

How do I check my project dependencies for network egress and telemetry risks?▼

Checking dependencies for network egress and telemetry risks involves evaluating their network behavior under an anonymity-hostile model to identify potential leaks and provide alternatives or disable options.

What is a software supply chain integrity check?▼

A software supply chain integrity check identifies abandoned packages, known CVEs, and lockfile issues within direct and transitive dependencies to maintain operational security and anonymity.

Can I scan agent-ingested content for injection directives and secrets?▼

You can scan agent-ingested content by auditing provenance and content for potential injection directives and secrets to ensure content integrity within your software supply chain.

Does dependency auditing work for anonymity and operational security?▼

Dependency auditing works for anonymity and operational security by evaluating dependency network behavior and egress risks to identify potential leaks, providing alternatives or disable options to maintain anonymity.

Related Skills

Explore More Software Engineering Skills→
Space-DinosaursSpace-Dinosaurs
12

agent-dependency-auditor

Audit project lockfiles for CVEs, license risks, and maintenance signals.

Official
Advanced
agentik-osagentik-os
10

depaudit

Audit dependency supply chains for CVEs, licensing, and provenance risks.

Community
Advanced
xlelibertyxleliberty

security-pen-testing

Perform offensive security assessments with vulnerability scanning and penetration testing.

Community
Advanced
ClearMeasureLabsClearMeasureLabs
3

owasp-dependency-scan

Scan .NET and npm dependencies for disclosed CVEs and generate consolidated security reports.

Official
Advanced