phx-deps-audit
From the author
Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking if a package upgrade is safe, or reviewing mix.lock PR diffs.
Install
npx skills add oliver-kriska/claude-elixir-phoenix --skill phx-deps-audit -a claude-code
Installs to .claude/skills/phx-deps-audit/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 80
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- deps-auditoliver-kriska/claude-elixir-phoenixAudit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking if a package upgrade is safe, or reviewing mix.lock PR diffs.Security★ 569
- phx-deps-vetoliver-kriska/claude-elixir-phoenixRecord vetted Hex versions after security review. Use to approve audited dependencies, not to scan them.Security★ 569
- deps-vetoliver-kriska/claude-elixir-phoenixRecord a vetted Hex package version in hex_vet.exs after a security review — manages the audit ledger, not the scanner. Use to approve a dep after /phx:deps-audit findings or to initialize hex_vet.exs.Security★ 569
- phx-deps-updateoliver-kriska/claude-elixir-phoenixUpdate Hex dependencies safely. Use for upgrades; use $elixir-phoenix:phx-investigate for deps.get failures.Finance★ 569
- supply-chain-risk-auditortrailofbits/skillsAudits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-party package risk, or review a dependency tree before an engagement.Engineering★ 7.7K
- phx-auditoliver-kriska/claude-elixir-phoenixProject health audit and health check — architecture, performance, tests, dependencies, code quality. Use when assessing overall project health, before releases, or after refactors.Testing★ 569
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in