Supply Chain Risk Auditor

Get skill on GitHubRaw SKILL.md on GitHub

Opens the skill on GitHub

Source Trail of Bits

Installnpx skills add trailofbits/skills --skill supply-chain-risk-auditor

Submit a skill

Overview

Audits dependencies for advisories, abandoned upstreams, publisher concentration, and install scripts.

Use cases

Show all 6Show fewer

Alternatives

  • Audit Firebase security rulesThis skill reviews the security rules for Firestore and Cloud Storage, looking for weak spots, red-team style. Its checklist covers privilege escalation, role bypasses, mismatched create and update logic, resource exhaustion, type checks, and size limits. Each rule set gets a score from 1 to 5.Coding agentFirebaseSecurity
  • AWS AMI BuilderBuilds Amazon Machine Images with Packer's amazon-ebs builder.Coding agentInfraOps
  • Azure ComplianceRuns Azure compliance and security audits with azqr and checks Key Vault secret expiration.Coding agentSecurityInfra
  • Cloudflare OneDesigns and troubleshoots Cloudflare One Zero Trust and SASE deployments.Coding agentSecurityInfra
  • CodeQLRuns CodeQL static analysis with interprocedural dataflow and taint tracking across major languages.Coding agentSecurityTesting
  • EAS UpdateConfigures EAS Update for over-the-air JavaScript and asset releases with expo-updates.Coding agentMobileOps