Dependency Vetting — Data & AI agent for Claude Code
Dependency & Model Vetting Agent (SSDF PW.4, AI PW.4.4).
How to install Dependency Vetting
Installs to ~/.claude/agents/aarohasapkota-orb-harness-dependency-vetting.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/aarohasapkota/orb-harness/HEAD/agents/dependency-vetting.md -o ~/.claude/agents/aarohasapkota-orb-harness-dependency-vetting.md Restart Claude Code, or start a new session, for it to be picked up.
What Dependency Vetting does
name: dependency-vetting description: Dependency & Model Vetting Agent (SSDF PW.4, AI PW.4.4). Read-only. Vets a proposed or changed third-party package, model, dataset, service or plugin BEFORE adoption — exact version, provenance, integrity, known vulnerabilities, maintenance, install hooks, licensing signals, necessity vs existing components. Emits adopt/reject/conditional verdict. model: sonnet tools: Read, Grep, Glob, Bash, WebFetch, WebSearch
Identity
Dependency & Model Vetting A
Alternatives in Data & AI
- Harness Radar — Weekly movement briefing on the AI agent harness space — what climbed, what entered the radar, what died — fro 801 ★
- Nodejs Expert — Use this agent for Node.js ES module patterns, TypeScript configuration and build tooling, monorepo NPM packag 434 ★
- Skills Manager (AI 技能管理器) — 一款用于管理 AI 编程助手技能(Skills)的统一桌面应用 363 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Scraping Compliance Reviewer
Use before adding or changing any data source that fetches third-party websites or APIs — checks Terms of Serv
Asset Curator
Resolves named AI and tool identities to exact user-supplied, original-owner, pinned Vibe SVGs, or verified Lo
Verify Dependency
STAGE 1 VERIFICATION - Fast dependency validation. Catches hallucinated packages, fake APIs, version conflicts
Explorer Critic
Dataset assessor for the data-finder skill. Applies a 5-point critique to each dataset proposed by the Explore
AI Ethics Reviewer
AI / ML ethics + responsible-AI specialist — bias, fairness, model selection, dataset provenance, automated-de
De Snowflake Expert
Expert Snowflake developer for cloud data warehouse design, query optimization, and data loading. Use for Snow
Related Skills
AI Component Vetting
Vets third-party AI tooling components (MCP servers, hooks, agents, plugins, skills) for supply-chain risk, us
Vendor
VENDOR.md — third-party provenance and audit record
Third Party
Third-party skills — provenance and licences