security-dependencies - Scan dependencies for vulnerabilities and supply-chain risks
Scans npm, Python, Go, and Rust dependencies for vulnerabilities, summarizes severity, generates remediation plans, and produces a CycloneDX SBOM.
Tags
Updated: 2026-10-02Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Detect dependency ecosystems
- Scan npm dependencies
- Scan Python dependencies
- Scan Go dependencies
- Scan Rust dependencies
- Summarize vulnerability severity
- Generate remediation plans
- Generate CycloneDX SBOMs
Inputs
- Project path
- Dependency manifest files
- Dependency lock files
Outputs
- Vulnerability scan results
- Severity summary
- Remediation plan
- CycloneDX SBOM
- Scanner error details
Requirements
- Python runtime
- npm and npm audit
- Safety CLI
- govulncheck CLI
- Cargo and cargo-audit
- Project dependency files