Dependency Security Scan

About

The Dependency Security Scan skill is a comprehensive Software Composition Analysis (SCA) tool for Claude Code that protects your software supply chain. It automatically identifies package managers across Node.js, Python, Go, Java, and more, cross-referencing your manifests against major vulnerability databases like the NVD and GitHub Advisory Database. Beyond just detection, it provides actionable remediation paths, including an auto-fix mode that safely updates packages to patched versions, and a health check feature to identify deprecated or unmaintained libraries.

Key Features

• Automated vulnerability remediation with smart version bumping and dry-run modes
• Multi-ecosystem support covering npm, pip, Cargo, Go modules, and more
• Detailed CVE reporting including severity scores (CVSS), attack vectors, and exploitability
• Dependency health metrics to identify outdated, deprecated, or unmaintained packages
• Configurable security thresholds and ignore rules for CI/CD integration
• 0 GitHub stars

Use Cases

• Performing rapid security audits on legacy or unfamiliar codebases
• Enforcing security compliance in CI/CD pipelines by blocking critical vulnerabilities
• Automating routine dependency maintenance to mitigate supply chain attacks