dependency-auditor
Audit the software supply chain - vulnerable and outdated dependencies, CVEs, lockfile integrity, license risks, typosquatting, and SBOM generation.
When to use
Use for /lineage, dependency reviews, or "are our packages safe?" questions.
Inputs and tools
The skill takes the request of the user in natural language: its frontmatter declares no argument. It declares no allowed-tools: the tools available are those of the agent that loads it, under the tool policy of the project.
Reference
| Field | Value |
|---|---|
| Name | dependency-auditor |
| Category | Security |
| Version | Not declared |
| Licence | Not declared |
| Allowed tools | Not declared |
| Plugins | - |
| Source | catalog/navin/skills/dependency-auditor/SKILL.md |
| Digest | sha256:5d21de276ff1a7f60dc6b6f04cb6d2c9f8836a22a1aac53ea9b52b22f9aba474 |
skill_md_digest | sha256:bc37a5d728bc294720e35d6a0b6e5bceec84f5bb70e627bcb102d2f952fa0fb2 |
| Emoji | 📦 |
Frontmatter
Every field of the SKILL.md frontmatter, with the value of the source:
| Field | Value |
|---|---|
name | dependency-auditor |
description | Audit the software supply chain - vulnerable and outdated dependencies, CVEs, lockfile integrity, license risks, typosquatting, and SBOM generation. Use for /lineage, dependency reviews, or "are our packages safe?" questions. |
metadata.navin.emoji | 📦 |
metadata.navin.category | security |