메뉴
Use when working on dependency review, vulnerable packages, lockfile risk, license concerns, and supply-chain hygiene. Focus on known CVEs, typosquatting risk, lockfile integrity, and update safety.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Use when designing about pages, company story pages, team pages, and mission pages. Basic version focused on trust, narrative, people, values, and company proof; emphasizes fast layout, obvious labels, a minimal section set, and a short checklist.
Use when designing about pages, company story pages, team pages, and mission pages. Pro version focused on trust, narrative, people, values, and company proof; emphasizes deep information architecture, strong hierarchy, explicit states, responsive behavior, accessibility, and validation checks.
Use when the task is to design a management console, 管理后台, admin panel, operations dashboard, moderation tool, or back-office web app. Focus on operator efficiency, table-first layout, filters, bulk actions, status visibility, and low-noise product UI.
Use when designing AI chat, copilots, agent workspaces, prompt consoles, and assistant surfaces. Basic version focused on conversation flow, tool state, citations, safety, and trust; emphasizes fast layout, obvious labels, a minimal section set, and a short checklist.
Use when designing AI chat, copilots, agent workspaces, prompt consoles, and assistant surfaces. Pro version focused on conversation flow, tool state, citations, safety, and trust; emphasizes deep information architecture, strong hierarchy, explicit states, responsive behavior, accessibility, and validation checks.
Use when the task is to design a BI dashboard, 数据大屏, analytics workspace, reporting console, KPI board, or monitoring page. Focus on question-first information hierarchy, chart choice, filter clarity, metric context, and decision-ready layout.
| schemaVersion | "2026-04-11T00:00:00.000Z" |
| skillId | security/dependency-supply-chain-audit |
| name | dependency-supply-chain-audit |
| displayName | Dependency Supply Chain Audit |
| description | Use when working on dependency review, vulnerable packages, lockfile risk, license concerns, and supply-chain hygiene. Focus on known CVEs, typosquatting risk, lockfile integrity, and update safety. |
| aliases | ["dependency-supply-chain-audit","Dependency Supply Chain Audit","dependencysupplychainaudit","依赖","依赖安全","dependency","供应链","软件供应链","链路","supply","chain","audit","代码审查","code review","评审","dependency security","供应链安全"] |
| version | 0.1.0 |
| sourceHash | sha256:6654ebbcbda29454e3a8ce8b881bb5f25e17adacde2d834c112f47a2e3970d40 |
| domain | security |
| departmentTags | ["security-platform"] |
| sceneTags | ["security-audit","review"] |
Use this skill when the task involves dependency review, vulnerable packages, lockfile risk, license concerns, and supply-chain hygiene.
Goal: produce reliable engineering guidance and implementation steps focused on known CVEs, typosquatting risk, lockfile integrity, and update safety.
