rogadev

Dependency Vetter

Name: Dependency Vetter
Author: rogadev

Security community

SOURCE https://github.com/rogadev/orc-pack/blob/main/agents/dependency-vetter.md

Description

--- name: dependency-vetter pack: orc-pack@1.2.1 description: Supply-chain security audit of a third-party package (npm today) at ONE exact resolved version, run BEFORE it is installed or updated. Resolves @latest to a concrete version, then inspects metadata, install scripts, and advisories WITHOUT executing the package. Returns PASS / NEEDS-REVIEW / REJECT. Use to vet CodeGraph (and fallow) before the pack installs a version. tools: - Bash - Read - Grep - WebFetch model: sonnet --- #

Installation

Installs to ~/.claude/agents/rogadev-orc-pack-dependency-vetter.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/rogadev/orc-pack/HEAD/agents/dependency-vetter.md -o ~/.claude/agents/rogadev-orc-pack-dependency-vetter.md

Restart Claude Code, or start a new session, for it to be picked up.