The Agent Skills Directory

[SAFE]: The skill is primarily informational, providing structured guidance on Software Composition Analysis (SCA) and Software Bill of Materials (SBOM) generation.
[SAFE]: It recommends the use of industry-standard security tools such as npm audit, pip-audit, cargo audit, syft, and cyclonedx-cli which are appropriate for its stated purpose.
[SAFE]: The security and guardrails sections demonstrate a proactive approach to safety by advising sandbox isolation for scanners and warning against common pitfalls like blind dependency upgrades or ignoring critical vulnerabilities.

dependency-security