Sassy-Dog

Dependency Supply Chain Reviewer — Security agent for Claude Code

Security community

Reviewer for dependencies and supply chain — outdated/vulnerable packages, lockfile hygiene, pinning, and provenance.

How to install Dependency Supply Chain Reviewer

Installs to ~/.claude/agents/sassy-dog-sassydog-skills-dependency-supply-chain-reviewer.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Sassy-Dog/sassydog-skills/HEAD/agents/dependency-supply-chain-reviewer.md -o ~/.claude/agents/sassy-dog-sassydog-skills-dependency-supply-chain-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Dependency Supply Chain Reviewer does

name: dependency-supply-chain-reviewer description: Reviewer for dependencies and supply chain — outdated/vulnerable packages, lockfile hygiene, pinning, and provenance. Dispatched by the assess-it skill in audit mode, and by the pr-review-orchestrator agent in diff-scoped mode over one changeset. color: blue

In **audit mode** you are a supply-chain and dependency expert conducting an evidence-based audit. You FIND dependency risk and cite evidence. You do NOT bump versions or write cod

Alternatives in Security

  • Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★
  • Audit Trail Verifier — Create an immutable evidence chain linking requirements, code, tests, scans, and releases 108 ★
  • Dependency Doctor — Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps 85 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Dep Purist — Security agent for Claude Code

Dep Purist

The relentless auditor of project dependencies. Use this agent to find outdated, vulnerable, duplicate, unused

Security community
Security Tester — Security agent for Claude Code

Security Tester

Use to audit code and dependencies for security problems - injection, auth and authorization gaps, secret leak

Security community
Tp Dep Health — Security agent for Claude Code

Tp Dep Health

PROACTIVELY use this when the user asks "which dependencies should I update", "any stale / risky packages", "a

Security community
Dependency Updater — Security agent for Claude Code

Dependency Updater

Use this agent to audit and update project dependencies. It checks for outdated packages, security vulnerabili

Security community
Cicd Release Reviewer — Security agent for Claude Code

Cicd Release Reviewer

Reviewer for CI/CD pipelines and release engineering — deploy safety, rollback, reproducibility, and pipeline

Security community
Dx Docs Reviewer — Security agent for Claude Code

Dx Docs Reviewer

Reviewer for developer experience and documentation — onboarding, local dev loop, tooling friction, README/ADR

Security community

Related Skills

Dep Crusade — Security skill for Claude Code

Dep Crusade

Unleash parallel Dependency Purist agents to audit every package.json, lockfile, and import for outdated, vuln

Security community
Nuget Audit — Security skill for Claude Code

Nuget Audit

Check for vulnerable or outdated NuGet packages

Security community
Sandbox Shell — DevOps skill for Claude Code

Sandbox Shell

macOS Seatbelt sandbox CLI for developers. Protect credentials (SSH, AWS, GPG) from malicious npm packages, su

DevOps community