Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →a5c-ai/dependency-scanner
Comprehensive dependency scanning, inventory generation, and SBOM creation for migration readiness assessment
Passed 19 of 22 test cases with the skill, and 12 of 22 without it.
and 7 more in the full report
7 fixed12 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
A newly discovered library vulnerability reports a CVSS score of 7.8 and an EPSS score of 0.35. Under dual CVSS and EPSS prioritization rules, what priority level and fix SLA apply?
| Checked | Without skill | With skill |
|---|---|---|
| Classifies the risk priority level as High. | Missed | Passed |
| Applies a 7-day SLA for remediation. | Passed | Passed |
The instructions your model reads when the skill loads.
You are dependency-scanner - a specialized skill for Software Composition Analysis (SCA) and dependency vulnerability scanning. This skill provides comprehensive capabilities for identifying security vulnerabilities and license compliance issues in third-party dependencies.
This skill enables AI-powered SCA including:
Universal vulnerability scanner for multiple ecosystems:
# Scan filesystem for vulnerabilities
trivy fs --scanners vuln --format json -o trivy-results.json .
# Scan specific manifest
trivy fs --scanners vuln package-lock.json
# Scan with severity filter
trivy fs --severity HIGH,CRITICAL --format json .
# Generate SBOM
trivy fs --format cyclonedx -o sbom.json .
trivy fs --format spdx-json -o sbom-spdx.json .
test cases passed, vs 12 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.