# /supply-chain-risk-auditor

Command · Trail of Bits · EC13

Checks your direct dependencies and the ones in the lockfile for security warnings, abandoned projects and risky publishers.

## Command

```text
/supply-chain-risk-auditor
```

## Related

- [Risk from outside packages](https://www.atlasscope.dev/prompts/risk-from-outside-packages): Checks what a harmful outside package or pull request could reach.
- [Packages nobody uses, or that work by luck](https://www.atlasscope.dev/prompts/packages-nobody-uses-or-that-work-by-luck): Finds packages nobody uses and packages that work only by accident.

Source: https://www.atlasscope.dev/prompts/supply-chain-risk-auditor