Trail of Bits Supply Chain Risk Auditor
Audit dependencies for advisories, abandoned packages and risky install scripts.
Official vendorby Trail of BitsChecked October 18, 2026
A Trail of Bits skill that measures the risk hiding in your dependency tree. Bundled scripts do the measuring, so the report is based on data rather than guesses.
Who it is for
- Security engineers
- Developers
- Engineering managers
Prompts to try
Once the skill is installed, ask for the result in plain words. Claude picks the skill up on its own.
Audit our dependencies for supply chain riskWhich of our npm packages run scripts on install?Review the dependency tree before we take on this client projectHow to install it
In Claude Code
/plugin marketplace add trailofbits/skills/plugin install supply-chain-risk-auditor@trailofbits
In Claude.ai
Not practical in Claude.ai because the skill drives local command-line tools, so use Claude Code.
Unlock the install steps
Free. Leave your email once to open the install steps for all 149 skills, and get the best new skills each month.
How we checked it
Confirmed SKILL.md at plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md in trailofbits/skills via the GitHub API; skill folder last changed 2026-09-16, repo has 7,620 stars and was pushed 2026-10-15.