القائمة
Scan an entire lockfile (package-lock.json, requirements.txt, etc.) for supply chain risks before committing or pushing.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Check a package against Phoenix Security Blue Shield - Firewall before adding it as a dependency. Call this before any npm install, pip install, or similar command.
Get remediation guidance for a blocked or warned package — find safe versions, alternatives, and migration paths.
| name | phoenix-security:audit-lockfile |
| description | Scan an entire lockfile (package-lock.json, requirements.txt, etc.) for supply chain risks before committing or pushing. |
Scan all dependencies in a lockfile for malware, vulnerabilities, and policy violations.
package-lock.json, requirements.txt, Cargo.lock, go.sum)phoenix_check_lockfile MCP tool with all package URLs from the lockfilenpx @phoenix-security/cli scan package-lock.json
git commit when lockfile has changednpm install or equivalent that modified the lockfile