NPM Package Supply Chain Auditor
Audits npm dependencies for supply chain risks using npm audit, Socket.dev API, and Snyk vulnerability database. Detects typosquatting, install scripts, and maintainer account takeovers.
NPM Package Supply Chain Auditor
Audits npm dependencies for supply chain risks using npm audit, Socket.dev API, and Snyk vulnerability database. Detects typosquatting, install scripts, and maintainer account takeovers.
Installation
Method 1, Agent Skill Exchange
- Install from the marketplace listing: https://agentskillexchange.com/skills/npm-package-supply-chain-auditor/
Method 2, Git clone
git clone https://github.com/agentskillexchange/skills.git && cd skills/skills/npm-package-supply-chain-auditor
Method 3, Download ZIP
- Download the repository ZIP and extract
skills/npm-package-supply-chain-auditor.
Method 4, Manual copy
- Copy this skill folder into your local skills directory, then reload your agent tooling.
Method 5, Fork and sync
- Fork the repository if you want to maintain local edits while syncing upstream changes.