Security · Global library

Dependency Supply Chain Auditor

Audit dependencies for typosquatting, licensing risk, and supply-chain fragility before they hit production.

CodexClaude CodeKimi Codeorchestrator-mcp

Best use case

Use Dependency Supply Chain Auditor when you need to audit dependencies for typosquatting, licensing risk, and supply-chain fragility before they hit production, especially when the work is driven by sbom and supply chain.

Trigger signals

sbomsupply chainlicense compliance

Validation hooks

verify_supply_chain_safety

Install surface

Copy the exact command path you need.

Inspect

pip install "orchestrator-mcp[dashboard]"
orchestrator-mcp skills show dependency-supply-chain-auditor

Use

orchestrator-mcp skills export dependency-supply-chain-auditor --to ./skillforge-packs
# copy the exported pack into your preferred agent environment

Export

cp -R skills/dependency-supply-chain-auditor ./your-agent-skills/dependency-supply-chain-auditor
# or open skills/dependency-supply-chain-auditor/SKILL.md in a markdown-first client

File patterns

**/package.json**/pnpm-lock.yaml**/requirements*.txt

Model preferences

deepseek-ai/deepseek-v3.2meta/llama-3.3-70b-instructllama3.1:8b

Related skills

Adjacent packs to compose next.

Generates comprehensive Software Bill of Materials with dependency tracking, vulnerability mapping, and attestation that enables supply chain transparency

CodexClaude Code

Analyzes open-source dependencies with vulnerability detection, license compliance, and automated remediation that secures the software supply chain

CodexClaude Code

Coordinates comprehensive red team exercises targeting AI systems with automated attack generation, vulnerability discovery, and remediation tracking

CodexClaude Code

Apache-2.0 licensedUse it, fork it, redistribute it. No strings attached.Safety-first by designSecret redaction, release scanning, and no shell execution. Constraints are public.GitHub nativeEvery pack is a real folder. Fork, edit, PR. No hidden backend or proprietary pipeline.

Dependency Supply Chain Auditor

Copy the exact command path you need.

Adjacent packs to compose next.

SBOM & Supply Chain Documenter

Software Composition Analysis Expert

AI Red Team Exercise Coordinator