Cookies

With your permission, we use Google Analytics cookies to measure visits and improve the site. Necessary cookies are always on. You can change your choice or withdraw consent anytime in the footer, under Cookie settings. Cookie Policy

Skip to content
PTEN
Get started

supply-chain-audit

Audit a project for software supply chain risk, including dependency vulnerabilities, lockfile issues, malicious package indicators, SBOM coverage, and license concerns.

  • Commands
  • Analysis
  • 28

What it does and how to use it

A /slash command, ready to use, that runs a analysis workflow in a single step.

  1. Install the command (command above).
  2. In Claude Code, type "/" followed by the command name.
  3. Follow the instructions the command asks for and let it run.

Install (Claude Code)

mkdir -p .claude/commands && curl -fsSL https://doutorai.pt/data/lib/commands__supply-chain-audit.md -o .claude/commands/supply-chain-audit.md

Paste this command into the terminal, in your project folder, and the component installs automatically.

Content

# /supply-chain-audit

Audit a project for software supply chain risk, including dependency vulnerabilities, lockfile issues, malicious package indicators, SBOM coverage, and license concerns.

## Purpose

Use this command to perform a focused supply chain security review of a codebase. It helps identify dependency-related risk across JavaScript, Python, Go, Rust, Java, Ruby, and container-based projects.

The command reviews both direct and transitive dependencies, highlights the most important findings first, and recommends exact remediation steps where possible.

## Usage

/supply-chain-aud

- 🔒 Full content on the Pro plan (€7.99/month) -

Need help with Claude Code?

Ask Dr AI - it explains things simply.

Need a tailor-made solution?

Not sure where to start with AI in your business? Get a free assessment and a tailored plan - no commitment.

Save hours every week with AI, no hassle

Doutor AI gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further.

See plans