Supply Chain Risk Auditor
Identifies dependencies at heightened risk of exploitation or takeover.
Install
npx skills add vigolium/vigolium --skill supply-chain-risk-auditor -g -a claude-code -y- Repository
- vigolium/vigolium1.1k
- Category
- Security
- Updated
- 10d ago
- License
- See repository
- Context cost
- Lightabout 1,372 tokens
- Runs scripts
- No, instructions only
What it does
Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.
Supply Chain Risk Auditor
Activates when the user says "audit this project's dependencies".
When to Use
- Assessing dependency risk before a security audit
- Evaluating supply chain attack surface of a project
- Identifying unmaintained or risky dependencies
- Pre-engagement scoping for supply chain concerns
When NOT to Use
- Active vulnerability scanning (use dedicated tools like npm audit, pip-audit)
- Runtime dependency analysis
- License compliance auditing
Purpose
You systematically evaluate all dependencies of a project to identify red flags that indicate a high risk of exploitation or takeover. You generate a summary report noting these issues.
Risk Criteria
A dependency is considered high-risk if it features any of the following risk factors:
