security-scanning-security-dependencies
Scans project dependencies to identify vulnerabilities and generate software bills of materials (SBOM).
Install
mkdir -p .claude/skills/security-scanning-security-dependencies && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/2972" && unzip -o skill.zip -d .claude/skills/security-scanning-security-dependencies && rm skill.zipInstalls to .claude/skills/security-scanning-security-dependencies
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.Key capabilities
- →Audit dependencies for vulnerabilities or license risks
- →Generate Software Bill of Materials (SBOMs) for compliance
- →Plan remediation for outdated or vulnerable packages
- →Standardize dependency scanning across ecosystems
- →Identify vulnerable packages and outdated dependencies
- →Assess risks and provide automated remediation strategies
How it works
The skill scans project dependencies across multiple ecosystems, integrates with vulnerability databases, and generates SBOMs. It identifies vulnerable packages and provides remediation strategies.
Inputs & outputs
When to use security-scanning-security-dependencies
- →Audit dependencies for vulnerabilities
- →Generate SBOM for compliance
- →Plan package remediation
- →Identify outdated or risky dependencies
About this skill
Dependency Vulnerability Scanning
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.
Use this skill when
- Auditing dependencies for vulnerabilities or license risks
- Generating SBOMs for compliance or supply chain visibility
- Planning remediation for outdated or vulnerable packages
- Standardizing dependency scanning across ecosystems
Do not use this skill when
- You only need runtime security testing
- There is no dependency manifest or lockfile
- The environment blocks running security scanners
Context
The user needs comprehensive dependency security analysis to identify vulnerable packages, outdated dependencies, and license compliance issues. Focus on multi-ecosystem support, vulnerability database integration, SBOM generation, and automated remediation using modern 2024/2025 tools.
Requirements
$ARGUMENTS
Instructions
- Clarify goals, constraints, and required inputs.
- Apply relevant best practices and validate outcomes.
- Provide actionable steps and verification.
- If detailed examples are required, open
resources/implementation-playbook.md.
Safety
- Avoid running auto-fix or upgrade steps without approval.
- Treat dependency changes as release-impacting and test accordingly.
Resources
resources/implementation-playbook.mdfor detailed patterns and examples.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
When not to use it
- →When only runtime security testing is needed
- →When there is no dependency manifest or lockfile
- →When the environment blocks running security scanners
How it compares
This skill provides complete dependency security analysis and automated remediation strategies across multiple ecosystems, unlike manual checks or single-ecosystem tools.
Compared to similar skills
security-scanning-security-dependencies side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| security-scanning-security-dependencies (this skill) | 1 | 4mo | No flags | Intermediate |
| dependency-management-deps-audit | 1 | 4mo | No flags | Intermediate |
| ship-safe | 0 | 1mo | Review | Beginner |
| review-security | 0 | 4mo | Review | Advanced |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by sickn33
View all by sickn33 →You might also like
dependency-management-deps-audit
sickn33
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
ship-safe
kinncj
Run ship-safe security and quality audit on the current project. Executes npx ship-safe audit . and reports findings by severity. Use before shipping any feature or PR.
review-security
ResearchMonkey
Full-project security sweep — OWASP dependency check, secrets scan, CVE audit, auth pattern review, governance compliance. Use for periodic security audits or standalone security assessments.
security-review
DrinkBoooz
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
sensitive-data-review
jonathan-geva
Use when reviewing code, tests, fixtures, docs, or commits for sensitive data exposure: names, phone numbers, emails, usernames, passwords, tokens, API keys, private IDs, birth dates, postal codes (PLZ/ZIP), hometown/Heimatort, or school-specific class/course identifiers.
contrib-pr-review
homeassistant-ai
Review a contribution PR for safety, quality, and readiness. Checks for security concerns, test coverage, size appropriateness, and intent alignment. Use when reviewing external contributions.