Skip to content
cccskills
FreePublished on GitHub

security-scanning-security-dependencies

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, assess risks, and recommend remediation.

The English summary is being prepared. Showing the original description.

See how to install

Files included (2)

  • SKILL.md1.8 KB
  • resources/implementation-playbook.md16.7 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Dependency Vulnerability Scanning

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.

Use this skill when

  • Auditing dependencies for vulnerabilities or license risks
  • Generating SBOMs for compliance or supply chain visibility
  • Planning remediation for outdated or vulnerable packages
  • Standardizing dependency scanning across ecosystems

Do not use this skill when

  • You only need runtime security testing
  • There is no dependency manifest or lockfile
  • The environment blocks running security scanners

Context

The user needs comprehensive dependency security analysis to identify vulnerable packages, outdated dependencies, and license compliance issues. Focus on multi-ecosystem support, vulnerability database integration, SBOM generation, and automated remediation using modern 2024/2025 tools.

Requirements

$ARGUMENTS

Instructions

  • Clarify goals, constraints, and required inputs.
  • Apply relevant best practices and validate outcomes.
  • Provide actionable steps and verification.
  • If detailed examples are required, open resources/implementation-playbook.md.

Safety

  • Avoid running auto-fix or upgrade steps without approval.
  • Treat dependency changes as release-impacting and test accordingly.

Resources

  • resources/implementation-playbook.md for detailed patterns and examples.

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.

The English summary is being prepared. Showing the original description.

rmyndharis/antigravity-skills1.8KUpdated Oct 15, 2026

Systematic improvement of existing agents through performance analysis, prompt engineering, and continuous iteration.

The English summary is being prepared. Showing the original description.

rmyndharis/antigravity-skills1.8KUpdated Oct 15, 2026

Optimize multi-agent systems with coordinated profiling, workload distribution, and cost-aware orchestration. Use when improving agent performance, throughput, or reliability.

The English summary is being prepared. Showing the original description.

rmyndharis/antigravity-skills1.8KUpdated Oct 15, 2026

Build production-ready LLM applications, advanced RAG systems, and intelligent agents. Implements vector search, multimodal AI, agent orchestration, and enterprise AI integrations. Use PROACTIVELY for LLM features, chatbots, AI agents, or AI-powered applications.

The English summary is being prepared. Showing the original description.

rmyndharis/antigravity-skills1.8KUpdated Oct 15, 2026

Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.

The English summary is being prepared. Showing the original description.

rmyndharis/antigravity-skills1.8KUpdated Oct 15, 2026

Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning framework migrations, or modernizing legacy Angular code.

The English summary is being prepared. Showing the original description.

rmyndharis/antigravity-skills1.8KUpdated Oct 15, 2026

See all skills by rmyndharis

Report a problem with this skill