AI Plugin Index
NPM Package Dependency Auditor
Skill by agentskillexchange · updated · ★ 54
Deep-audits npm package dependency trees using the npm Registry API and Socket.dev security intelligence. Identifies supply chain risks, typosquatting, and license incompatibilities across transitive dependencies. NPM Package Dependency Auditor is published by agentskillexchange on GitHub.
Last commit 3 days ago
MIT: permissive, fine for commercial use
Clear description, installs from GitHub, 54 stars, original repository
Not checked yet. What we check
Install NPM Package Dependency Auditor
Built from the published package, never by AIgit clone --depth 1 https://github.com/agentskillexchange/skills /tmp/skills && mkdir -p ~/.claude/skills && cp -r /tmp/skills/skills/npm-package-dependency-auditor ~/.claude/skills/npm-package-dependency-auditorRun in your terminal. Claude Code loads skills from ~/.claude/skills automatically.
Step-by-step: install NPM Package Dependency Auditor in Claude Code
git clone --depth 1 https://github.com/agentskillexchange/skills /tmp/skills && mkdir -p ~/.gemini/antigravity-cli/skills && cp -r /tmp/skills/skills/npm-package-dependency-auditor ~/.gemini/antigravity-cli/skills/npm-package-dependency-auditorAntigravity CLI loads skills from ~/.gemini/antigravity-cli/skills, or .agents/skills for one project.
Step-by-step: install NPM Package Dependency Auditor in Antigravity CLI
Skills can run scripts on your machine. Some need an API key: check the README.
Weekly newsletter
Like NPM Package Dependency Auditor? Get the best new skills every week
The best new tools, security warnings before you install something risky, and one practical tip. Free, three minute read.
Alternatives to NPM Package Dependency Auditor
All alternatives →
Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork.
Build Slack apps using the Bolt framework across Python, JavaScript, and Java. Covers Block Kit for rich UIs, interactive components, slash commands, event handling, OAuth installation flows, and Workflow Builder integration.
Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules from the event patterns. Use when investigating a suspected cluster compromise, reconstructing what an attacker did through the API server, or writing Kubernetes-specific detection content. Keywords: audit policy, audit log, kube-apiserver, exec into pod, RBAC change, anonymous access, detection rules. Do not use for syscall-level detection inside a running container - use detecting-container-runtime-threats-with-falco. '
Review a verdaccio diff, branch, or pull request against the repository review guide (security first, then npm-client compatibility, performance, product fit, maintainability), verify each finding against the code, and report actionable issues. Use for code reviews and for reviewing your own changes before or during a PR workflow.
Review multiplayer authority, RPCs, sessions, authorization, replication, inventory, economy, purchases, retries, and replay. Use when server or backend state is the security boundary.
CVE lookup and applicability assessment domain card. Use after reconnaissance has identified products, versions, services, or fingerprints and red-team mode needs evidence-based CVE matching before deeper testing.
NPM Package Dependency Auditor: common questions
How do I install NPM Package Dependency Auditor?
Run the command above to copy the skill into ~/.claude/skills/. Claude Code picks it up automatically.
Is NPM Package Dependency Auditor free?
The code is published under the MIT licence. The service it connects to may have its own pricing.
Is NPM Package Dependency Auditor safe to use?
It scores 40 of 100. Grades: maintenance A, licence A, quality B. The security check has not run for it yet. Review the code before you install. How grades work.
What are alternatives to NPM Package Dependency Auditor?
Similar skills: security-review, slack-bot-builder, analyzing-kubernetes-audit-logs, review-code.