Home / Skills / ghost-scan-deps
ghost-scan-deps
ghostsecurity/skillsSkill
Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.mod, or Gemfile.lock.
Why this score
This repo hosts 8 skills, so its 413 stars are split between them (about 52 each) for scoring.
Popularity score: 60/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 25fdf0687607, with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.agents/init/agent.md:1
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneghost-scan-deps ghostsecurity/skills · Skill | 60 | ★ 413 | ≈107 always | 1mo ago |
| dep-security tinyfish-io/tinyfish-cookbook · Skill Both about dep and cve | 73 | ★ 2.3k | ≈26 always | 27d ago |
| dep-auditor laolaoshiren/claude-code-skills-zh · Skill Both about dep and gemfile | 69 | ★ 894 | ≈42 always | 16d ago |
| update-deps backnotprop/plannotator · Skill Both about dep and dependency | 79 | ★ 9.5k | ≈54 always | 16d ago |
| plugin-heavy-dep NanmiCoder/dsh-agent-teams · Skill Both about dep and dependency | 72 | ★ 2.3k | ≈96 always | 17d ago |
| circular-dep-untangler luongnv89/skills · Subagent Both about dep and dependency | 57 | ★ 133 | ≈25 in chat | 16d ago |