SkillFeeder › 全部 Skill › 其他 › incident-response

把模糊的 npm 安全疑虑转成可执行的修复步骤

incident-response

incident-response 是 SkillFeeder 收录的Agent Skill，来自 GitHub 仓库 salemalem/npmscan-mcp-plugin，★ 502。把模糊的 npm 安全疑虑转成可执行的修复步骤。适合安全响应者、前端工程师。场景是其他。能做的事包括理解非技术描述，如“这包看着可疑”、自动补全缺失上下文，无需用户先跑扫描、输出明确操作：删包、锁版本、查脚本。打开 GitHub 自行安装。

打开 GitHub

仓库
salemalem/npmscan-mcp-plugin
仓库星标
★ 502
场景
其他
适合
安全响应者、前端工程师
类型
Skill

能做什么

原文简介

Turn a flagged npm supply-chain finding — or just a vague, non-technical description of one ("this package looks sketchy," "someone said we got hacked," "npm install did something weird") — into concrete remediation steps. Use whenever the user wants to know what to actually do about a suspicious/compromised/flagged package, however precisely or vaguely they describe it — not for the initial trust

同场景推荐