Menu
Scan an entire lockfile (package-lock.json, requirements.txt, etc.) for supply chain risks before committing or pushing.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Check a package against Phoenix Security Blue Shield - Firewall before adding it as a dependency. Call this before any npm install, pip install, or similar command.
Get remediation guidance for a blocked or warned package — find safe versions, alternatives, and migration paths.
Based on SOC occupation classification
| name | phoenix-security:audit-lockfile |
| description | Scan an entire lockfile (package-lock.json, requirements.txt, etc.) for supply chain risks before committing or pushing. |
Scan all dependencies in a lockfile for malware, vulnerabilities, and policy violations.
package-lock.json, requirements.txt, Cargo.lock, go.sum)phoenix_check_lockfile MCP tool with all package URLs from the lockfilenpx @phoenix-security/cli scan package-lock.json
git commit when lockfile has changednpm install or equivalent that modified the lockfile