Heeler Malicious Package Scan — Development skill for Claude Code
Detect suspicious or malicious dependencies using Heeler package-risk intelligence.
How to install Heeler Malicious Package Scan
Installs to ~/.claude/skills/api-evangelist-heeler-heeler-malicious-package-scan/SKILL.md
mkdir -p ~/.claude/skills/api-evangelist-heeler-heeler-malicious-package-scan && curl -fsSL https://raw.githubusercontent.com/api-evangelist/heeler/HEAD/skills/heeler-malicious-package-scan.md -o ~/.claude/skills/api-evangelist-heeler-heeler-malicious-package-scan/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Heeler Malicious Package Scan does
name: heeler-malicious-package-scan description: Detect suspicious or malicious dependencies using Heeler package-risk intelligence. Use when a new dependency is installed or users ask about typosquatting, malware in dependencies, or supply-chain package risk.
Heeler Malicious Package Scan
Use this skill to detect potentially malicious packages in repository dependencies.
When to use
- User asks for malicious package detection.
- User asks about typosquatting, dependency hijacki
Alternatives in Development
- Skill Creator — Create new skills, modify existing skills, and measure skill performance 94.1k ★
- Claude SEO — Multi-Platform Agent Instructions — For Cursor, Cursor Cloud Agents, Google Antigravity, and Gemini CLI 5k ★
- Sanitize — Detect and redact PII from text files — 15 categories (SSNs, credit cards, API keys, etc.), zero dependencies 3.1k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Heeler Recommended Version
Determine the recommended dependency version for a package ecosystem. Use when installing a new dependency/upd
Deps Macros Ergonomics
Rust Intel — Dependencies, Macros & Ergonomics (supply-chain, clone, proc-macro, features, workspace, Deref, r
Static Malware Analysis For Claude Code
A Skill for Claude Code to perform static malware analysis on a suspicious file.
Skilltotal
Claude Code plugin that scans a package before the agent runs npx, npm install, pip install, uvx or claude mcp
Heeler Secrets Scan
Run Heeler secret scanning for a repository or staged changes. Use when comitting code or the user asks to det
Calico Claude
Calico Claude — display-patched Claude Code native builds with verified supply chain (fork of a-connoisseur/pa
Related Agents
Forensic Specialist
Use PROACTIVELY for security audits or when suspicious patterns detected. Cybersecurity specialist for defensi
Ehs Supply Chain
Software supply chain and secrets specialist for the Ethical Hacker Squad. Reviews manifests and lockfiles, in
Supply Chain Framework Auditor
Audits dependency CVEs, malicious or over-permissioned SDKs, build-pipeline leftovers (debug flags, test endpo