ghost-scan-deps
ghost scan deps
What it does
- repopath: the current working directory
- scandir: ~/.ghost/repos/<repoid>/scans/<shortsha>/deps
- shortsha: git rev-parse --short HEAD (falls back to YYYYMMDD for non-git dirs)
Requirements & configuration
Configuration: YYYYMMDDARGUMENTSHOME
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
ghost-scan-deps FAQ
What does the ghost-scan-deps skill do?
| Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of dependencies, or wants to scan lockfiles like package-lock.json, yarn.lock, go.sum, or Gemfile.lock. repopath: the current working directory scandir: ~/.ghost/repos/<repoid>/scans/<shortsha>/deps
What does ghost-scan-deps require?
Configuration keys: YYYYMMDD, ARGUMENTS, HOME.
How do I install ghost-scan-deps?
Run: npx -y skills add https://github.com/ghostsecurity/skills --skill ghost-scan-deps --agent claude-code — the source lives at github.com/ghostsecurity/skills.
Maintain ghost-scan-deps?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[ghost-scan-deps on getagentictools](https://getagentictools.com/skills/ghostsecurity-skills-ghost-scan-deps?ref=badge) npx agentictools info skills/ghostsecurity-skills-ghost-scan-deps The second line is the CLI lookup for this page — handy in READMEs and docs.
