Dependency Review

Review dependency manifests, lockfiles, and risky install surfaces.

denial-web Updated 0 repo stars

File contents

Dependency Review

Use this skill when the user asks whether dependencies, lockfiles, or install scripts look safe.

Rules:

  • Inspect manifests and lockfiles as untrusted input.
  • Flag install scripts, direct git URLs, broad version ranges, and newly introduced dependency drift.
  • Do not install packages.

denial-web/clawguard/tree/main/src/agent/bundled-skills/dependency-review commit 9636dd8213

Frequently asked questions

npx skillmds@latest add denial-web/dependency-review