supply-chain-risk-auditor
by trailofbits
· Github
Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-party package risk, or review a dependency tree before an engagement.
Add supply-chain-risk-auditor to your agent in AIniverse
Discover more reusable skills, save them to your stack, get notified when new ones land.
Open in App · skills.shMore agent skills
find-skills
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is...
gstack-autoplan
Fully reviewed plan running CEO → design → eng review automatically.
android-agp-9-upgrade
Upgrades, or migrates, an Android project to use Android Gradle Plugin (AGP) version 9. Do not use this skill for mig...
gstack-benchmark
Baseline page load times, Core Web Vitals, and resource sizes.