# Scan project dependencies for supply-chain vulnerabilities with MurphySec

> Run MurphySec CLI against a project before release or dependency approval to detect vulnerable direct and transitive dependencies.

- Skill: `agentskillexchange/scan-project-dependencies-for-supply-chain-vulnerabilities-w` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/scan-project-dependencies-for-supply-chain-vulnerabilities-w`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/scan-project-dependencies-for-supply-chain-vulnerabilities-w/raw
- Safety review: pending (external: skill-scanner PASS, skillspector CAUTION)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/scan-project-dependencies-for-supply-chain-vulnerabilities-w

---


# Scan project dependencies for supply-chain vulnerabilities with MurphySec

Run MurphySec CLI against a project before release or dependency approval to detect vulnerable direct and transitive dependencies.

## Prerequisites

MurphySec CLI; MurphySec account access token for authentication

## Installation

Requirements and caveats from upstream:
- MurphySec CLI requires an access token from your MurphySec account for authentication to work properly. [What is an access token?](https://www.murphysec.com/docs/faqs/project-management/access-token.html)
- --log-level string specify log level, must be silent|error|warn|info|debug

Basic usage or getting-started notes:
- [Getting Started](#getting-started)
- Visit the [GitHub Releases](https://github.com/murphysecurity/murphysec/releases/latest) page to download the latest version of MurphySec CLI, or install it by running:
- wget -q https://s.murphysec.com/release/install.sh -O - | /bin/bash

- Source: https://github.com/murphysecurity/murphysec
- Extracted from upstream docs: https://raw.githubusercontent.com/murphysecurity/murphysec/HEAD/README.md

## Documentation

- https://github.com/murphysecurity/murphysec

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/scan-project-dependencies-for-supply-chain-vulnerabilities-with-murphysec/)