--- title: "Supply Chain Risk Auditor: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/trailofbits-supply-chain-risk-auditor/ description: "Collects dependency identity, advisory and repository-maintenance evidence while retaining unassessable cases." --- # Supply Chain Risk Auditor: review, setup & limitations · Undominated.ai > Collects dependency identity, advisory and repository-maintenance evidence while retaining unassessable cases. [← Explore all skills](/skills/) SECURITY AND PRIVACY / Trail of Bits # Supply Chain Risk Auditor Collects dependency identity, advisory and repository-maintenance evidence while retaining unassessable cases. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Trail of Bits Licence [CC-BY-SA-4.0 ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/LICENSE) Revision 82fe82262526 [Read what was—and wasn’t—checked ↓](#review) “Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-party package risk, or review a dependency tree before an engagement.” [Trail of Bits · upstream description ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Keeps ecosystem and resolved package versions attached to evidence and distinguishes unknown results from clean checks. - Separates cached collection from report generation so the underlying metadata can be inspected alongside the narrative. ### A good fit for - Prioritizing a manual review of npm, Python or Go dependencies - Building an evidence packet for dependency adoption or maintenance decisions - Separate direct-dependency maintenance signals from transitive advisory-only coverage ### Weigh up before choosing - Documented project inputs include npm package-lock/shrinkwrap, Python uv.lock and supported Go module files; other lock formats need a separate extraction step. - Repository activity and ownership signals are triage evidence, not proof of maliciousness or package safety. Latest-version fallback is not evidence about the version installed in your project. - Only the stated source paths and collection boundaries were inspected; this is not a comprehensive audit of the large helper implementation. - The transitive sweep assesses advisories only. Private or non-registry dependencies must remain unassessable instead of inheriting a same-named public package assessment. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - Full SKILL.md - scripts/sources.py HTTP/cache and ownership handling - scripts/collect.py CLI, orchestration and collection boundaries - scripts/model.py result structures - pyproject.toml - LICENSE - plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/scripts/collect.py ### Our findings - The source represents unassessable packages explicitly and preserves collection metadata rather than interpreting an absent response as a safe verdict. - Selected collect.py identity/version and transitive-sweep branches were inspected: non-registry inputs are excluded from public-name lookups and latest-release fallbacks remain labeled. - It tells the agent not to use gh contributor counts as a substitute for registry publish rights. ### Not established by this review - No end-to-end agent session, effectiveness benchmark or target-project security assessment was run. - No upstream installer, helper script or generated workload was executed. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/vercel-labs/skills/blob/13e4063a1cf913f5606d57d42ab83a86f5001e04/README.md) DOCUMENTED COMMAND npx skills add trailofbits/skills/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor --skill supply-chain-risk-auditor Copy command ↗ Run in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above. Optional: install the reviewed revision Keeps the original source and installer version where recorded, while leaving your AI tools and installation scope for you to choose. npx skills add https://github.com/trailofbits/skills/tree/82fe8226252622fa807643bdca1710901198553a/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor --skill supply-chain-risk-auditor Copy reviewed-revision command ↗ - Inspect the selected skill version and its supporting files before installation. - Run the command in your terminal; choose your AI tools and project or global scope in the installer. - Keep the complete skill directory and its licence. Install any task-specific tools separately and test on a small authorized example. ### Before you start - Node.js and npm for the Skills CLI - An Agent Skills compatible coding assistant - uv and Python 3.11 or later for the two scripts (standard library only) - Optional: an authenticated gh CLI, and pip-audit or the other optional tools if already installed ### Compatibility Agent Skills compatible clients ### Agent instructions and host-provided tools - Read project manifests and lockfiles; write cache and report files - Contact package registries, advisory services and GitHub; package names and repository identities leave the machine - Optional gh authentication can access private metadata and pip-audit runs as a separate local process - Read dependency manifests/locks; query registries, advisory and repository APIs using optional GitHub authentication; write cached metadata and reports. ### Cost model CC BY-SA licensed instructions and helpers; agent usage and any separately chosen scanning services are additional. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Definition at the reviewed revision ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/SKILL.md Supports: summary, upstreamDescription, whySelected, bestFor, limitations, review, access - [Licence at the reviewed revision ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/LICENSE) Checked 2026-10-07 https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/LICENSE Supports: license, access.cost - [Skills CLI directory URLs and named-skill selection ↗](https://github.com/vercel-labs/skills#readme) Checked 2026-10-07 https://github.com/vercel-labs/skills#readme Supports: install, compatibility - [plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/scripts/collect.py ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/scripts/collect.py) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor/scripts/collect.py Supports: review, limitations, access, install KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Semgrep Rule Creator ↗ Turns a concrete bug pattern into a Semgrep rule with positive and negative test cases.](/skills/trailofbits-semgrep-rule-creator/)[### Variant Analysis ↗ Expands a confirmed vulnerability into related-code searches while preserving root-cause evidence and triage decisions.](/skills/trailofbits-variant-analysis/)[### Dependabot ↗ Configures and manages Dependabot end to end: ecosystem detection across 25+ package managers, monorepo glob directories, grouped and multi-ecosystem updates, cooldown periods, ignore and allow rules, and PR command etiquette including the January 2026 deprecations.](/skills/github-dependabot/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)