1 file · 16 lines · 1.1 KB
View on GitHub
- dependency-checker.json 16 lines · 1.1 KB
dependency-checker.json
JSON
{
"description": "Advanced dependency analysis and security checking. Monitors for outdated packag..."
"hooks": {
"PostToolUse": [1 item]
}
}
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
1 observation
scanner score 7/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- MCP server referenced without pinned version: 'npx npm-check-updates'.MCP Rug Pull · dependency-checker.json:10
Learn more about NVIDIA SkillSpector or how components are reviewed.