plan-dependency-provenance
Installation
SKILL.md
Dependency Provenance & Supply-Chain Audit + Remediation Plan
Degree of freedom: HIGH — resolve, classify, plan. Stay plan-only. Never install a suspect package to "check".
This skill vs neighbors
| Skill | Owns |
|---|---|
| plan-dependency-provenance (this) | Slopsquatting / SBOM / license plan |
plan-security-audit |
OWASP umbrella burndown |
workflow-housekeep |
Apply dependency updates after approval |
plan-dead-code |
Unimported deps + unreachable source (graph fact) |