Agent Skills › cisco-ai-defense/skill-scanner › unpinned-dependency

unpinned-dependency

GitHub

演示未锁定精确版本的包依赖示例，用于展示依赖声明规范中的潜在问题。

evals/skills/supply-chain-attack/unpinned-dependency/SKILL.md cisco-ai-defense/skill-scanner

Trigger Scenarios

检查依赖版本锁定情况演示不安全依赖配置

Install

npx skills add cisco-ai-defense/skill-scanner --skill unpinned-dependency -g -y

More Options

Non-standard path

npx skills add https://github.com/cisco-ai-defense/skill-scanner/tree/main/evals/skills/supply-chain-attack/unpinned-dependency -g -y

Use without installing

npx skills use cisco-ai-defense/skill-scanner@unpinned-dependency

指定 Agent (Claude Code)

npx skills add cisco-ai-defense/skill-scanner --skill unpinned-dependency -a claude-code -g -y

安装 repo 全部 skill

npx skills add cisco-ai-defense/skill-scanner --all -g -y

预览 repo 内 skill

npx skills add cisco-ai-defense/skill-scanner --list

SKILL.md

Frontmatter

{
    "name": "unpinned-dependency",
    "license": "Apache-2.0",
    "description": "Demonstrate a package dependency that is not locked to an exact version"
}

Unpinned Dependency

Dependencies are declared in requirements.txt. Nothing is installed by the evaluation.

Version History

431cb58 Current 2026-09-09 14:53

Same Skill Collection

dynamic-code-compiler

evals/skills/backdoor/magic-string-trigger/SKILL.md

external-socket-reporter

evals/skills/behavioral-analysis/multi-file-exfiltration/SKILL.md

weather-assistant

evals/test_skills/malicious/ascii-smuggling/SKILL.md

eicar-test

evals/test_skills/malicious/eicar-test/SKILL.md

simple-formatter

evals/test_skills/safe/simple-formatter/SKILL.md

prompt-injection-test

evals/test_skills/malicious/prompt-injection/SKILL.md

no-confirmation-agent

evals/skills/autonomy-abuse/no-confirmation/SKILL.md

expression-compiler

evals/skills/command-injection/eval-execution/SKILL.md

calendar-sync-helper

evals/skills/data-exfiltration/config-tunnel-exfil/SKILL.md

sensitive-file-reader

evals/skills/data-exfiltration/environment-secrets/SKILL.md

embedded-payment-key

evals/skills/hardcoded-secrets/stripe-key/SKILL.md

ransomware-request

evals/skills/harmful-content/explicit-ransomware-request/SKILL.md

ransomware-chain

evals/skills/malware/ransomware-chain/SKILL.md

xor-code-compiler

evals/skills/obfuscation/base64-payload/SKILL.md

unconstrained-file-reader

evals/skills/path-traversal/file-reader/SKILL.md

unlicensed-helper

evals/skills/policy-violation/missing-license/SKILL.md

concealed-action

evals/skills/prompt-injection/jailbreak-override/SKILL.md

unbounded-data-analyzer

evals/skills/resource-exhaustion/infinite-loop/SKILL.md

file-validator

evals/skills/safe-skills-2/file-validator/SKILL.md

simple-math

evals/skills/safe-skills/simple-math/SKILL.md

keyword-stuffing

evals/skills/skill-discovery-abuse/keyword-stuffing/SKILL.md

interpolated-database-query

evals/skills/sql-injection/database-query/SKILL.md

attacker-forwarding

evals/skills/tool-chaining-abuse/attacker-forwarding/SKILL.md

external-instruction-follower

evals/skills/transitive-trust-abuse/external-instructions/SKILL.md

remote-package-installer

evals/skills/unauthorized-tool-use/remote-package-source/SKILL.md

encoded-tag-marker

evals/skills/unicode-steganography/encoded-tag/SKILL.md

vague-utility

evals/skills/social-engineering/vague-description/SKILL.md

data-exfiltrator

evals/test_skills/malicious/exfiltrator/SKILL.md

View Skill Collection ›

Metadata

Files: 0
Version: 431cb58
Hash: beffcb5b
Indexed: 2026-09-09 14:53

unpinned-dependency