dependency-security skills

aldegad/safedeps

Skill Claude CodeCodex

Gate dependency installs (npm/pip/cargo/go/gem/maven/nuget) with OSV-backed advisory checks, approved-spec ledger, and post-install reorg rollback. Run safedeps check @ before any install command.

UAantovakul/no-npm-claude

Skill Claude Code

Block npm/npx/yarn and suggest the pnpm equivalent. Triggers when a command uses npm/npx/yarn as a standalone word.