dep-security
tinyfish-io/tinyfish-cookbookSkill
Check every dependency in a package.json against live CVE databases and security advisories
Why this score
This repo hosts 10 skills, so its 2,261 stars are split between them (about 226 each) for scoring.
Popularity score: 73/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 21, 2026 at commit 63cd841bdfd1, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onedep-security tinyfish-io/tinyfish-cookbook · Skill | 73 | ★ 2.3k | ≈26 always | 27d ago |
| update-deps backnotprop/plannotator · Skill Both about dep and dependency | 79 | ★ 9.5k | ≈54 always | 16d ago |
| dep-auditor laolaoshiren/claude-code-skills-zh · Skill Both about dep and package | 69 | ★ 894 | ≈42 always | 16d ago |
| ghost-scan-deps ghostsecurity/skills · Skill Both about dep and cve | 60 | ★ 413 | ≈107 always | 1mo ago |
| plugin-heavy-dep NanmiCoder/dsh-agent-teams · Skill Both about dep and dependency | 72 | ★ 2.3k | ≈96 always | 17d ago |
| circular-dep-untangler luongnv89/skills · Subagent Both about dep and dependency | 57 | ★ 133 | ≈25 in chat | 16d ago |