跳到正文
cccskills
免费在 GitHub 公开

security-scanning-security-dependencies

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, assess risks, and recommend remediation.

中文简介正在准备中。当前显示原文说明。

查看安装方法

包含的文件(2)

  • SKILL.md1.8 KB
  • resources/implementation-playbook.md16.7 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Dependency Vulnerability Scanning

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.

Use this skill when

  • Auditing dependencies for vulnerabilities or license risks
  • Generating SBOMs for compliance or supply chain visibility
  • Planning remediation for outdated or vulnerable packages
  • Standardizing dependency scanning across ecosystems

Do not use this skill when

  • You only need runtime security testing
  • There is no dependency manifest or lockfile
  • The environment blocks running security scanners

Context

The user needs comprehensive dependency security analysis to identify vulnerable packages, outdated dependencies, and license compliance issues. Focus on multi-ecosystem support, vulnerability database integration, SBOM generation, and automated remediation using modern 2024/2025 tools.

Requirements

$ARGUMENTS

Instructions

  • Clarify goals, constraints, and required inputs.
  • Apply relevant best practices and validate outcomes.
  • Provide actionable steps and verification.
  • If detailed examples are required, open resources/implementation-playbook.md.

Safety

  • Avoid running auto-fix or upgrade steps without approval.
  • Treat dependency changes as release-impacting and test accordingly.

Resources

  • resources/implementation-playbook.md for detailed patterns and examples.

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance.

中文简介正在准备中。当前显示原文说明。

rmyndharis/antigravity-skills18242026年10月15日 更新

Systematic improvement of existing agents through performance analysis, prompt engineering, and continuous iteration.

中文简介正在准备中。当前显示原文说明。

rmyndharis/antigravity-skills18242026年10月15日 更新

Optimize multi-agent systems with coordinated profiling, workload distribution, and cost-aware orchestration. Use when improving agent performance, throughput, or reliability.

中文简介正在准备中。当前显示原文说明。

rmyndharis/antigravity-skills18242026年10月15日 更新

Build production-ready LLM applications, advanced RAG systems, and intelligent agents. Implements vector search, multimodal AI, agent orchestration, and enterprise AI integrations. Use PROACTIVELY for LLM features, chatbots, AI agents, or AI-powered applications.

中文简介正在准备中。当前显示原文说明。

rmyndharis/antigravity-skills18242026年10月15日 更新

Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.

中文简介正在准备中。当前显示原文说明。

rmyndharis/antigravity-skills18242026年10月15日 更新

Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning framework migrations, or modernizing legacy Angular code.

中文简介正在准备中。当前显示原文说明。

rmyndharis/antigravity-skills18242026年10月15日 更新

查看 rmyndharis 的全部技能

报告此技能的问题