← All skills

dependency-reviewer

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By endorlabs/ai-plugins (GitHub) · security · 10 stars · scanned at commit b658069

Evaluates an exact package version, summarizes package risk, or reviews dependencies declared by a repository through one focused workflow. It uses available vulnerability, malware, package-health, license, policy, and Endor evidence to provide a read-only recommendation and clearly identify missing information.

Works with any agent that supports SKILL.md skills.

What this skill can do

Other copies in this repository

endorlabs/ai-plugins has 4 more folders with a skill named dependency-reviewer. This page shows the lowest-scoring copy.

• plugins/gemini/endor-labs-agent-kit/skills/dependency-reviewer 97/100 · Low risk
• plugins/antigravity/endor-labs-agent-kit/skills/dependency-reviewer 97/100 · Low risk
• plugins/codex/endor-labs-agent-kit/bundled-skills/dependency-reviewer 97/100 · Low risk
• plugins/codex-directory/endor-labs-agent-kit/skills/dependency-reviewer 97/100 · Low risk

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'dependency-reviewer' ] || [ -L ~/.agents/skills/'dependency-reviewer' ]; then echo 'A skill folder named dependency-reviewer already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/endorlabs/ai-plugins' "$d" && git -C "$d" checkout --quiet 'b6580695f66f0d6ed21a47a37ec369a93a1a0d9a' -- 'plugins/cursor/endor-labs-agent-kit/skills/dependency-reviewer' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/cursor/endor-labs-agent-kit/skills/dependency-reviewer' ~/.agents/skills/'dependency-reviewer' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'dependency-reviewer' ~/.claude/skills/'dependency-reviewer' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for endorlabs/ai-plugins shows the score of its lowest-scoring skill.

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/endorlabs/ai-plugins.svg)](https://zalavijaysinh.github.io/skilltrust/repos/endorlabs/ai-plugins/)

Score history