Spot risky dependencies before you install.
Reviews proposed or existing dependencies for supply-chain risks and returns findings with installation recommendations.
When to use it
Use before installing packages suggested by a skill, when reviewing added or unfamiliar dependencies, or during periodic project security audits.
Give it proposed or existing project dependencies; it returns an audit report with checks, an approval decision, and recommendations.
What you provide
No setup requirements listed.
No additional actions listed.