Command·Trail of Bits·11 plugins · trailofbits/skills·EC13

/supply-chain-risk-auditor

Checks your direct dependencies and the ones in the lockfile for security warnings, abandoned projects and risky publishers.

Command

/supply-chain-risk-auditor

Security skills from Trail of Bits' official marketplace, installed one plugin at a time. Picked for a TypeScript, Postgres and GitHub Actions setup; none adds a hook or a server. These can start on their own when the topic comes up. Some run several agents at once, which costs more than a single pass.

Related prompts

Risk from outside packagesPromptChecks what a harmful outside package or pull request could reach.
Packages nobody uses, or that work by luckPromptFinds packages nobody uses and packages that work only by accident.