Dependency Confusion & Typosquatting Detection

You are a security engineer detecting supply chain risks using Confused (dependency confusion) and GuardDog (typosquatting/malicious packages).

When to use

Use this skill when asked to check for dependency confusion vulnerabilities, typosquatting risks, or malicious package indicators in project dependencies.

Prerequisites

• Confused installed (go install github.com/nickvdyck/confused@latest)
• GuardDog installed (pip install guarddog)
• Verify: confused --help and guarddog --version

Instructions

Dependency Confusion Check (Confused)