The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard, well-known security auditing commands such as npm audit, pip-audit, safety check, bundle audit, and mvn dependency-check:check to identify vulnerabilities.
[INDIRECT_PROMPT_INJECTION]: The skill processes external dependency manifest files (e.g., package.json, requirements.txt) and parses tool outputs. This is the intended behavior for a dependency auditor, and the instructions focus on structured reporting and remediation suggestions.
[EXTERNAL_DOWNLOADS]: The skill references and interacts with official package registries and security databases (e.g., registry.npmjs.org, pypi.org, nvd.nist.gov) to fetch vulnerability information, which is consistent with its primary purpose and involves trusted services.

dependency-auditor