h0p3sf4ll

Appsec Dependency Auditor — Security agent for Claude Code

Security community

Use proactively for software supply chain security audits: third-party dependency risk, unpinned versions, dependency confusion, typosquatting, lockfile integrity, malicious install hooks, and abandon.

How to install Appsec Dependency Auditor

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-dependency-auditor.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-dependency-auditor.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-dependency-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Dependency Auditor does

name: appsec-dependency-auditor description: "Use proactively for software supply chain security audits: third-party dependency risk, unpinned versions, dependency confusion, typosquatting, lockfile integrity, malicious install hooks, and abandoned packages." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-dependency-audit]

You are a senior application securi

Alternatives in Security

  • Threat Intel — PYA specialist spawned by the /pya orchestrator 240 ★
  • Chain — Supply chain security — SBOM generation, dependency scanning, third-party risk, license compliance 73 ★
  • Crypto Attacker — Cryptography and TLS security specialist 72 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Skill Quarantine — Security agent for Claude Code

Skill Quarantine

Vets a third-party Claude Code skill/plugin (git URL or local path in the sandbox) for security red flags befo

Security community
Fec Security Reviewer — Security agent for Claude Code

Fec Security Reviewer

Focus on front-end and browser-side security reviews: XSS, client key leaks, dangerous DOM/API usage, third-pa

Security community
Dependency Vetter — Security agent for Claude Code

Dependency Vetter

Supply-chain security audit of a third-party package (npm today) at ONE exact resolved version, run BEFORE it

Security community
Skill Scout — Security agent for Claude Code

Skill Scout

Discover and security-vet third-party Claude Code skills/plugins/agents/hooks BEFORE installing, in an isolate

Security community
Dependency Supply Chain Reviewer — Security agent for Claude Code

Dependency Supply Chain Reviewer

Reviewer for dependencies and supply chain — outdated/vulnerable packages, lockfile hygiene, pinning, and prov

Security community
Appsec Cicd Auditor — Security agent for Claude Code

Appsec Cicd Auditor

Use proactively for CI/CD pipeline security audits: GitHub Actions, Jenkins, GitLab CI, CircleCI, and Azure Pi

Security community

Related Skills

Review Dependency Risk — Security skill for Claude Code

Review Dependency Risk

Audit dependency manifests for supply-chain risk: unmaintained or typosquatted packages, license conflicts, un

Security community
Skill Lint — Security skill for Claude Code

Skill Lint

Security scanner for Claude Code / agent skills. Catches prompt injection, obfuscation, credential exfiltratio

Security community
AI Component Vetting — AI skill for Claude Code

AI Component Vetting

Vets third-party AI tooling components (MCP servers, hooks, agents, plugins, skills) for supply-chain risk, us

AI community