ca-add-dep
From the author
Vet a new or changed third-party dependency for license, provenance, and supply-chain risk before any install runs.
Install
npx skills add arbiterForge/codeArbiter --skill ca-add-dep -a claude-code
Installs to .claude/skills/ca-add-dep/ · Each command fetches the skill straight from GitHub with the open skills CLI.
No download: this skill’s licence (AGPL-3.0) does not let us redistribute its files. The install commands fetch them from GitHub instead.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
No warnings.
Why 82
Security100
Provenance66
Maintenance100
Licence80
Adoption37
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- supply-chain-advisoryathola/claude-night-marketAudits dependency supply chains for bad versions, lockfile drift, and artifact integrity. Use when adding deps, handling incidents, or releasing a plugin.Other★ 343
- dependency-auditTibsfox/gsd-skill-creatorProvides dependency management and supply chain security practices for auditing vulnerabilities, checking licenses, assessing dependency health, and managing upgrades safely. Use when auditing packages, reviewing security, managing dependencies, or when user mentions 'audit', 'vulnerability', 'dependency', 'supply chain', 'npm audit', 'license', 'bundle size'.Security★ 71
- dependency-risk-auditproflead/codex-skills-libraryAudit dependencies for licensing, security, and maintenance risk. Use when a senior developer needs risk assessment.Security★ 164
- supply-chain-risk-auditortrailofbits/skillsAudits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-party package risk, or review a dependency tree before an engagement.Engineering★ 7.9K
- dependency-verificationathola/claude-night-marketVerifies a package exists before install, defending against hallucination and slopsquatting. Use when adding, recommending, or installing a package.Other★ 343
- chain-scantonone-ai/tononeDesign a dependency scanning program — CVE detection, license checks, and CI gates. Use when asked to "scan our dependencies", "set up CVE detection", or "add a dependency CI gate".Security★ 76
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in