supply-chain-risk-auditor

An agent skill by trailofbits, from trailofbits/skills. Tags: analysis, compliance, dependencies, security.

What it does

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-party package risk, or review a dependency tree before an engagement.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add trailofbits/skills --skill supply-chain-risk-auditor

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/trailofbits/skills
cp -r skills/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor ~/.claude/skills/supply-chain-risk-auditor

Safety box score

Grade C, moderate risk: 39 of 100 risk points, rated 2026-10-19. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a network-heavy dependency auditor that reads project manifests and lockfiles, then queries npm, PyPI, GitHub, OSV, deps.dev, proxy.golang.org, and Scorecard to produce a report. The main risks are broad outbound metadata exposure, use of the user’s GitHub CLI credentials, and an unread core script (`scripts/collect.py`) that limits full review of the pipeline.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	The skill runs local helper commands with `subprocess.run`, including `gh auth token` and optional `pip-audit`, so it executes external programs even though it does not use shell eval or downloaded scripts.
Network access	3 (high)	The collector is intentionally networked and queries multiple third-party services: `registry.npmjs.org`, `pypi.org`, `api.github.com`, `api.osv.dev`, `api.deps.dev`, `proxy.golang.org`, and `api.scorecard.dev`.
Filesystem reach	1 (low)	It reads manifests/lockfiles and writes cache/report files via `self.cache_dir.mkdir(...)`, `_write_cache`, and `path.unlink(missing_ok=True)`, but the file operations are bounded to the chosen cache/output paths.
Secrets & credentials	2 (moderate)	It reads the user’s GitHub CLI token with `subprocess.run(["gh", "auth", "token"], ...)` and sends it as `Authorization: Bearer ...` to GitHub APIs, so it touches authenticated credentials.
Privilege & persistence	0 (none)	The reviewed files do not request sudo, global installs, services, scheduled tasks, or shell/OS configuration changes.
Instruction hijack surface	0 (none)	The skill contains defensive escaping and no instructions to bypass confirmations, follow remote instructions, hide actions, or adopt an injected persona.
Irreversible actions	0 (none)	It reports on dependencies and does not push, publish, deploy, post, pay, book, or delete external resources.
Transparency	2 (moderate)	`scripts/collect.py` could not be read (`not read: size or budget`), so a core part of the pipeline is opaque to review.

Before installing

Inspect `scripts/collect.py` before trusting the collector end to end.
Run `gh auth status` in a disposable account if authenticated GitHub access is not desired.
Confirm the cache and output directories are private and on a path you are willing to let the tool rewrite.
Verify outbound access to GitHub, npm, PyPI, OSV, deps.dev, proxy.golang.org, and Scorecard before running it on sensitive projects.

Rated 2026-10-19 by an automated review of 11 files from the skill's repository.

Source

Repository: trailofbits/skills (all skills from this repository)
Path: plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md
Branch: main
Collection: supply-chain-risk-auditor
Updated: 2026-09-19

vulnerability-triage-brocards — This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission".
algorand-vulnerability-scanner — Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations.
audit-augmentation — Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files.
audit-context-building — Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.
audit-prep-assistant — Prepares codebases for security review using Trail of Bits' checklist.
burpsuite-project-parser — Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns.