The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were detected. The skill follows security best practices for dependency management and supply chain hardening.
[COMMAND_EXECUTION]: The skill instructs the agent to execute standard package management and security auditing commands.
Executes pnpm audit, pnpm why, and pnpm outdated to analyze dependencies.
Uses sfw (Socket Firewall) to wrap installation commands (sfw pnpm install) for network-level protection.
Performs standard cleanup of local environment files (rm -rf node_modules pnpm-lock.yaml) during troubleshooting.
[EXTERNAL_DOWNLOADS]: The skill references and downloads software from well-known security service providers.
Installs the Socket Firewall CLI (sfw) via npm i -g sfw or by downloading binaries from the official SocketDev GitHub repository.
Integrates with StepSecurity's Harden-Runner and Socket's GitHub Actions for CI/CD security.

fix-dependency-security