“npm”

Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardDog, manual tarball inspection, and…

Detects typosquatting attacks in npm and PyPI package registries by analyzing package name similarity using Levenshtein distance and other string metrics…

Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumerating claimable internal package names…

Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation, using edit-distance, keyboard-proximity, and…

Motion on Regent's Phoenix LiveView and Ash sites with Anime.js v4 (npm animejs) and the shared motion kit, written as TypeScript hook islands.

Measure traction and discoverability across all non-archived GitHub repos and their publications (npm, App Store, Play Store, web properties), judge each…

扫描代码安全漏洞，检测依赖漏洞、密钥泄露和OWASP安全模式。当用户提到安全扫描、漏洞检测、依赖审计、密钥泄露、API key、OWASP、npm audit、pip-audit或SQL注入/XSS等关键词时触发。

Use when user wants to work with Dependabot PRs, alerts, or the Dependabot configuration file.

Install the kakutey CLI tool (npm package) for operating the kakutey bookkeeping app from the command line.

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived…

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

release-it configuration, setup, troubleshooting, and plugin development.

Turns a Backstage plugin you are developing into a deployable Red Hat Developer Hub dynamic plugin artifact: run @red-hat-developer-hub/cli plugin export to…

Maintain and release a Unity UPM package repository that follows the `Packages/jp.keijiro.*` layout.

Create a new Aizen skill or improve an existing one to the Aizen standard (v4) - interview, design note, scaffold SKILL.md + manifest (topics, requires), link…

Create, edit, redline, and verify Word .docx files.

Installs Agent Skills from the ryan-minato/skills library into a project or globally, and lists what the library offers.

Clean up development caches and build artifacts on macOS to free disk space.

Use when you want an independent second opinion from a different AI model (OpenAI Codex CLI).

Dependency management specialist.

Screens third-party project dependencies for known vulnerabilities and supply-chain risk before installation using a bundled check-deps.py script.

Install packages at runtime inside the Docker container.