vuln-dependency

What problem does it solve?

This skill automates the detection of vulnerable dependencies and supply chain risks across a project's dependency graph, helping security teams identify exploitable weaknesses before they are weaponized.

Core Features & Use Cases

• Scan for known CVEs in direct and transitive dependencies for Node.js, Python, Java, and other ecosystems.
• Detect dependency confusion risks by validating registry configurations and namespace scoping.
• Append findings to ./assessment/vulnerabilities.md for audit trails and remediation planning.
• Use case: conduct security audits during bug bounty programs to centralize vulnerability reporting.

Quick Start

Run vuln-dependency to scan your project for vulnerable dependencies and append findings to ./assessment/vulnerabilities.md.