Audit

1 skill

Evidence-backed, read-only dependency audits for vulnerabilities, malware, supply-chain compromise, and host-computer risks.

View this plugin on GitHub

any skills-format agent

$ npx skills add rj11io/11ai --skill 11ai-audit-sec-deps-scripts

claude code

$ claude plugin install 11ai-audit@11ai

codex

$ codex plugin add 11ai-audit@11ai

First time? Add the marketplace once with claude plugin marketplace add rj11io/11ai or codex plugin marketplace add rj11io/11ai, then install any plugin from it.

11ai-audit-sec-deps-scripts

Fail-closed, read-only dependency security auditing across manifests, lockfiles, installed trees, registry version candidates, advisory databases, and live web sources. Enumerate every dependency and every version the configured resolver could install, then check each exact candidate for critical vulnerabilities, malware, compromised releases, install-time execution, and other host-computer risks. Use before installing or updating packages, when scanning a repository or proposed package/version, when comparing declared/locked/installed versions, or when producing an evidence-backed dependency security report.