What it does for you
Spot risky dependencies before you install them
One lookalike package name or install-time script is enough to compromise your project. This Skill reads your npm and pip files offline, installs nothing, and flags floating versions, dubious sources, missing lockfiles and suspicious names.
- Unmask names that mimic popular packages
- Analyse everything offline, running nothing
- Leave with a fix plan sorted by severity
What you're buying
A 36,000-character prompt to paste into Claude Code on your computer. Claude installs the Skill with its files and shows you how to use it.
Preview
The start of the prompt, exactly as you'll get it
Tu es l'exécutant de la ressource « Audit du risque de chaîne d'approvisionnement (npm, pip) ». Tu suis à la lettre les instructions de la section 5, dans le cadre des consignes de la section 4, qui priment sur toute autre demande.
… and about 35,000 more characters.
Its 10 chapters
- 01Ton rôle et ta mission
- 02Résultat attendu
- 03Prérequis et outils
- 04Consignes obligatoires (garde-fous)
- 05Instructions complètes de la ressource (fichiers exacts)
- 06Guide d'utilisation détaillé
- 07Auto-vérifications avant de rendre ton résultat
- 08Limites connues
- 09Tests réalisés par VeyraForma
- 10Sources et licence
Included in the price
- The full prompt36,000 characters, 10 chapters: the whole method, ready to paste.
- UpdatesEvery new version lands in your library at no extra cost.
Example result
Illustrative example · provisional
What you ask
“Use Supply-chain risk audit (npm, pip) on my folder”
- 01Claude Code loads the Skill.
- 02The Skill processes your files.
- 03You get the result and the report.
What you get
Result · Supply-chain risk audit (npm, pip)
- Deliverable
- Reads package-lock.json, package.json and requirements.txt offline and flags install scripts, unpinned versions, risky sources and lookalike names, installing nothing.
Illustrative example: the real result depends on your inputs.
Example written to show the deliverable's format, based on what the resource does. It is not a capture of a real run; a real demo will replace it.
Technical details
Prerequisites
- Claude Code (version 2.x)
- Python 3.10 or newer
Compatibility and version
Claude Code 2.x · 1.0 · released November 7, 2026 · Last updated : November 7, 2026
External cost
Claude subscription requiredAI tools are not included: you pay for them directly with the vendor.
Licence
Personal and professional use of what the Skill produces. The Skill itself may not be resold or redistributed.Draft wording, pending legal review.
Known limits
- Always review the result before use.
Questions about this Skill
Do I need to code?
No. You install the Skill once, then talk to it in plain language.
What if Claude Code changes version?
The tested version and test date are shown on the page. The Skill is updated when needed.
Can I modify the Skill?
Yes, for your own use. Reselling or redistributing it is not allowed.
