GPTsApp SkillsCodex Reset
Menu
← Back to results

plugin directory · Use or study

supply-chain-risk-auditor

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm

SKILL.md metadata excerpt. This is the source’s description, not an instruction to this site.

trailofbits/skillsplugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md

Before you use it

Input
Not independently summarized. Check the source’s scope and examples.
Expected output
Not independently summarized; do not assume a ready-to-use artifact.
Prerequisites
Review the source instructions, scripts, accounts and tools in your intended environment.

Installation guidance is not individually established for this example. Read the source and confirm its requirements.

Publisher documentation, static file observations and environment tests are different kinds of evidence. Runtime behavior has not been observed.

Study the method

Start with the task scope and instructions, then inspect supporting files and examples. Compare the workflow with your own inputs, constraints and intended result.

13 files in the observed scope; 10 in scripts/, 0 in references/, 1 in assets/.

The supporting file list has not been read for this source. Open the source directory to inspect it.

Zero files in scripts/ does not mean no execution, network access or file writes. Markdown and other folders may describe or contain executable behavior.

Source version and requirements

Observed
2026-09-12T07:19:42.833Z
Source commit
321ccfe628eca0d314b0ee4eaffcdd8a05639aaf
Content SHA-256
a1254b7f8d3a1731a9a7e1f9cd6c67b59cf84ed6ef7c7fb455db9a14c528ceb4
License
Unknown
Author attribution
Repository owner: trailofbits. Individual authorship is not independently established.
Read applicable source license ↗

This page describes a pinned source snapshot, not the latest repository state. Changes after this commit have not been reconciled here. A repository license does not necessarily cover external models, datasets or services.

Open current repository ↗
Reference note and manual copy