Comprehensive dependency scanning, inventory generation, and SBOM creation for migration readiness assessment
Scans code dependencies to generate inventories and SBOMs for migration planning and security assessments.
npx claudepluginhub a5c-ai/babysitterThis skill is limited to using the following tools:
README.mdPerforms comprehensive dependency scanning and inventory generation for codebases, supporting migration planning and security assessments through SBOM (Software Bill of Materials) generation.
Enable comprehensive dependency management for:
This skill can leverage the following external tools when available:
| Tool | Purpose | Integration Method |
|---|---|---|
| npm/yarn/pnpm | Node.js dependencies | CLI |
| Maven | Java dependencies | CLI |
| Gradle | Java/Kotlin dependencies | CLI |
| pip/pipenv/poetry | Python dependencies | CLI |
| Bundler | Ruby dependencies | CLI |
| Cargo | Rust dependencies | CLI |
| Go Modules | Go dependencies | CLI |
| Snyk | Security scanning | CLI / API |
| OWASP Dependency-Check | Vulnerability scanning | CLI |
| Trivy | SBOM generation | MCP Server / CLI |
| Syft | SBOM generation | CLI |
# Invoke skill for dependency scanning
# The skill will auto-detect package managers and scan accordingly
# Expected inputs:
# - targetPath: Path to project root
# - scanDepth: 'direct' | 'transitive' | 'full'
# - outputFormat: 'json' | 'tree' | 'sbom-cyclonedx' | 'sbom-spdx'
# - includeLicenses: boolean
Detection Phase
Extraction Phase
Analysis Phase
Output Generation
{
"scanId": "string",
"timestamp": "ISO8601",
"target": {
"path": "string",
"packageManagers": ["string"],
"manifestFiles": ["string"]
},
"summary": {
"totalDependencies": "number",
"directDependencies": "number",
"transitiveDependencies": "number",
"uniquePackages": "number",
"treeDepth": "number"
},
"dependencies": [
{
"name": "string",
"version": "string",
"type": "direct|transitive",
"parent": "string|null",
"license": "string",
"repository": "string",
"depth": "number"
}
],
"conflicts": [
{
"package": "string",
"versions": ["string"],
"sources": ["string"],
"recommendation": "string"
}
],
"circularDependencies": [
{
"chain": ["string"],
"severity": "high|medium|low"
}
],
"licenses": {
"summary": {
"MIT": "number",
"Apache-2.0": "number",
"GPL-3.0": "number"
},
"copyleft": ["string"],
"unknown": ["string"]
},
"sbom": {
"format": "cyclonedx|spdx",
"version": "string",
"path": "string"
}
}
This skill integrates with the following Code Migration/Modernization processes:
Create .dependency-scanner.json in the project root:
{
"packageManagers": ["auto"],
"excludePaths": ["node_modules", ".git"],
"scanDepth": "full",
"includeDev": true,
"includeOptional": false,
"licensePolicy": {
"allowed": ["MIT", "Apache-2.0", "BSD-3-Clause", "ISC"],
"flagged": ["GPL-3.0", "AGPL-3.0"],
"blocked": []
},
"sbomConfig": {
"format": "cyclonedx",
"version": "1.5",
"includeVulnerabilities": true
}
}
When Trivy SBOM Generator MCP Server is available:
// Example MCP tool invocation
{
"tool": "trivy_generate_sbom",
"arguments": {
"target": "./",
"format": "cyclonedx",
"output": "./sbom.json"
}
}
When GitHub Dependabot MCP Server is available:
// Example dependency update check
{
"tool": "dependabot_check_updates",
"arguments": {
"repo": "owner/repo",
"ecosystem": "npm"
}
}
# Auto-detected files:
# - package.json
# - package-lock.json
# - yarn.lock
# - pnpm-lock.yaml
# Auto-detected files:
# - pom.xml
# - build.gradle
# - build.gradle.kts
# Auto-detected files:
# - requirements.txt
# - Pipfile
# - pyproject.toml
# - setup.py
# Auto-detected files:
# - Gemfile
# - Gemfile.lock
# Auto-detected files:
# - go.mod
# - go.sum
# Auto-detected files:
# - Cargo.toml
# - Cargo.lock
vulnerability-scanner: Security scanning of dependencieslicense-compliance-checker: Detailed license analysisdependency-updater: Automated dependency updatesdependency-modernization-agent: Uses this skill for dependency managementmigration-readiness-assessor: Uses this skill for readiness evaluationsecurity-vulnerability-assessor: Uses this skill for dependency securityActivates when the user asks about AI prompts, needs prompt templates, wants to search for prompts, or mentions prompts.chat. Use for discovering, retrieving, and improving prompts.
Search, retrieve, and install Agent Skills from the prompts.chat registry using MCP tools. Use when the user asks to find skills, browse skill catalogs, install a skill for Claude, or extend Claude's capabilities with reusable AI agent components.
This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples", "agent tools", "agent colors", "autonomous agent", or needs guidance on agent structure, system prompts, triggering conditions, or agent development best practices for Claude Code plugins.