OpenAgentSkill Registry Manifest
Skill: ghost-scan-deps
Slug: ghostsecurity-ghost-scan-deps
Category: security
Description: Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.sum, or Gemfile.lock.

Agent fit:
- Decision: 72/100 Strong shortlist
- Primary fit: Security and compliance
- Role: Companion skill

Supply profile:
- Track: Research and knowledge work
- Scenario: Research agents
- Applicable agents: Claude Code, CLI, Codex, Cursor
- Maintenance: 3d since push
- Risk: Needs review

Trust:
- Trust score: 74/100 Strong shortlist
- Audit: 80/100 Needs review

Attribution:
- Status: Registry indexed
- Source: github candidate review
- Creator: ghostsecurity
- Claim URL: https://www.openagentskill.com/skills/ghostsecurity-ghost-scan-deps#claim-this-skill

Install:
npx skills add ghostsecurity/skills --skill ghost-scan-deps

URLs:
- Web: https://www.openagentskill.com/skills/ghostsecurity-ghost-scan-deps
- API: https://www.openagentskill.com/api/agent/skills/ghostsecurity-ghost-scan-deps
- Install API: https://www.openagentskill.com/api/skills/ghostsecurity-ghost-scan-deps/install
- Repository: https://github.com/ghostsecurity/skills/tree/main/plugins/ghost/skills/scan-deps