Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.
Install
npx skills add trailofbits/skills --skill supply-chain-risk-auditornpx skills add trailofbits/skills --skill supply-chain-risk-auditor -a claude-code -gnpx skills add trailofbits/skills --skill supply-chain-risk-auditor -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditorgh skill install trailofbits/skills supply-chain-risk-auditorgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor ~/.claude/skills/supply-chain-risk-auditor # Claude Code
cp -R /tmp/trailofbits__skills/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor ~/.agents/skills/supply-chain-risk-auditor # Codex, Cursor, Gemini CLI, Copilot, OpenCode