How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

security-scanning-security-dependencies - Skill

Name: security-scanning-security-dependencies
Author: sickn33

Imported from sickn33/agentic-awesome-skills (skills/security-scanning-security-dependencies/SKILL.md). Install upstream with npx skills add sickn33/agentic-awesome-skills --skill security-scanning-security-dependencies. Copyright stays with the author.

Dependency Vulnerability Scanning

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.

Use this skill when

Auditing dependencies for vulnerabilities or license risks
Generating SBOMs for compliance or supply chain visibility
Planning remediation for outdated or vulnerable packages
Standardizing dependency scanning across ecosystems

Do not use this skill when

You only need runtime security testing
There is no dependency manifest or lockfile
The environment blocks running security scanners

Context

The user needs comprehensive dependency security analysis to identify vulnerable packages, outdated dependencies, and license compliance issues. Focus on multi-ecosystem support, vulnerability database integration, SBOM generation, and automated remediation using the installed tool versions and current advisory database snapshot.

Requirements

$ARGUMENTS

Instructions

Clarify goals, constraints, and required inputs.
Apply relevant best practices and validate outcomes.
Provide actionable steps and verification.
If detailed examples are required, open resources/implementation-playbook.md.

Safety

Avoid running auto-fix or upgrade steps without approval.
Treat dependency changes as release-impacting and test accordingly.

Resources

resources/implementation-playbook.md for detailed patterns and examples.

Limitations

Use this skill only when the task clearly matches the scope described above.
Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Example

For a locked npm project, capture the exact package-lock hash, npm version and advisory timestamp, distinguish scanner errors from findings, and propose one compatible fixed version in a topic branch. Re-run relevant tests and the scanner without auto-upgrading unrelated packages or claiming exploitability from a CVE match.

Install security-scanning-security-dependencies and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "sickn33-agentic-awesome-skills-security-scanning-securit-82c3d1", "kind": "skill", "name": "security-scanning-security-dependencies", "description": "You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.", "publisher": "sickn33", "version": "1.0.0", "capabilities": { "domains": [ "legal" ], "tags": [ "skill-md", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies." ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/sickn33/agentic-awesome-skills", "path": "skills/security-scanning-security-dependencies/SKILL.md", "ref": "HEAD", "url": "https://github.com/sickn33/agentic-awesome-skills/blob/HEAD/skills/security-scanning-security-dependencies/SKILL.md", "key": "sickn33/agentic-awesome-skills/skills/security-scanning-security-dependencies/SKILL.md" } }, "instructions": "# Dependency Vulnerability Scanning\n\nYou are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.\n\n## Use this skill when\n\n- Auditing dependencies for vulnerabilities or license risks\n- Generating SBOMs for compliance or supply chain visibility\n- Planning remediation for outdated or vulnerable packages\n- Standardizing dependency scanning across ecosystems\n\n## Do not use this skill when\n\n- You on", "cost": { "context_tokens": 561 } }

security-scanning-security-dependencies

About

Dependency Vulnerability Scanning

Use this skill when

Do not use this skill when

Context

Requirements

Instructions

Safety

Resources

Limitations

Example

Install security-scanning-security-dependencies and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews