Supply Chain Risk Auditor

by Trail of Bits OrgOfficialSkill · in Security Research

Medium Risk

Identifies dependencies at heightened risk of exploitation or takeover — assesses supply chain attack surface and dependency health.

Pending Review

This skill has been submitted and is awaiting security assessment.

Required Permissions

File System (Read/Write) Code Execution (Bash)

trailofbits/skills/tree/main/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor

Repository data will be available after the next enrichment run.

Trail of Bits (Org) Official MIT Pending Review

Similar Skills

Semgrep Scanner

Skill Security Research

Medium

Runs Semgrep static analysis with parallel subagents — full ruleset and high-confidence security scan modes with Semgrep Pro cross-file taint analysis.

Semgrep Subagent

MIT 3 permissions

CodeQL

Skill Security Research

Medium

Scans codebases for security vulnerabilities using CodeQL interprocedural data flow and taint tracking — supports full and important-only scan modes.

MIT 2 permissions

Atheris Python Fuzzer

Skill Security Research

Medium

Coverage-guided Python fuzzer based on libFuzzer — fuzzing pure Python code and Python C extensions.

Fuzzing Python

MIT 1 permission