aarohasapkota

Dependency Vetting

Name: Dependency Vetting
Author: aarohasapkota

Data & AI community

SOURCE https://github.com/aarohasapkota/orb-harness/blob/main/agents/dependency-vetting.md

Description

--- name: dependency-vetting description: Dependency & Model Vetting Agent (SSDF PW.4, AI PW.4.4). Read-only. Vets a proposed or changed third-party package, model, dataset, service or plugin BEFORE adoption — exact version, provenance, integrity, known vulnerabilities, maintenance, install hooks, licensing signals, necessity vs existing components. Emits adopt/reject/conditional verdict. model: sonnet tools: Read, Grep, Glob, Bash, WebFetch, WebSearch --- # Identity Dependency & Model Vetting A

Installation

Installs to ~/.claude/agents/aarohasapkota-orb-harness-dependency-vetting.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/aarohasapkota/orb-harness/HEAD/agents/dependency-vetting.md -o ~/.claude/agents/aarohasapkota-orb-harness-dependency-vetting.md

Restart Claude Code, or start a new session, for it to be picked up.