supply-chain-risk-auditor
Skill that identifies dependencies at heightened risk of exploitation or takeover.
About
Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-p…
At a glance
- Category
- Security AppSec scanning
- Made for
- Developers
- Pricing
- Free
- Access
- No sign-in
Category, summary and these details are StealthStack's reading of the publisher's own listing. Check the publisher's page before you rely on them.
Capabilities
The crawler did not record capability metadata for this resource. Inspect the endpoint directly to see what it exposes.
Provenance
- Discovered
- Relayed by github
- Identifier
- urn:air:github.com:trailofbits:skills:supply-chain-risk-auditor
- Catalog host
- github.com · via github registry
- Anchor check
- Not anchored
- Last crawled
- seen 8d ago
Discovered through github.com's registry, not anchored by StealthStack. We relay the listing as-is; we have not checked that the URN authority matches the publishing host. How trust works →