Plan Dependency Provenance | Agent Skills Atlas

About this skill

Audit dependencies for hallucinated or slopsquatted packages, supply-chain risk, and licensing/provenance gaps, then produce a phased remediation plan. Use when the user says "check my dependencies", "is this package real", "slopsquatting", "audit my supply chain", "license check", "SBOM", or "did the AI hallucinate a package". Audits package existence/age/popularity, lockfile integrity, typo-squatted names, transitive bloat, and license provenance. Plan only until approved. Pairs with plan-secrets-audit, workflow-housekeep. Do NOT use for version bumps or bundle size (audit-bundle-size).

Quick start

Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.

Installation guide →

Review, license & listing details

Review the source before using this skill

This is an imported listing. We haven’t certified its safety, license, or compatibility. Skills may include executable scripts.

Automated security scan: Partial

Only SKILL.md was scanned. Supporting files and scripts were not checked. No safety grade has been assigned.

0 potential findings · Scanned 11/4/2026 · Scanner 0.2.1

Content SHA-256: 10d1cd68175cd2d5de5899af631eac35cf22d1cb9ffe41b06f061a925f62c156

About scan coverage and limitations

Original listing metadata

Original name

plan-dependency-provenance

Original description

About this listing

Category: General
Reported license: MIT
Listing language (estimated): English
Review status: Not individually reviewed
Agent compatibility: Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.