ghost-scan-deps

Scans project dependency lockfiles for exploitable vulnerabilities and provides severity assessments and remediation guidance.

When to use it

Use when the user requests dependency vulnerability scanning, CVE checks, or a security audit of dependency lockfiles.

Give it a project to scan; it saves a dependency vulnerability report under ~/.ghost and reports the results to the user.