Skip to content
SkillCheatSheet Sign in

detecting-typosquatting-packages

An AI agent skill from mukul975/Anthropic-Cybersecurity-Skills, scored 82 out of 100 by code and Verified.

82/ 100BVerified

Code score by group

  • Spec20/20
  • Description16/20
  • Procedure7/15
  • Done criteria11/15
  • Resources8/10
  • Scripts8/8
  • Safety7/7
  • Upkeep5/5

It loses the most points in Procedure (8), the group that checks whether the steps are numbered, read the context first and say what to do when something fails.

What the author says it does

Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation, using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, Microsoft OSSGadget's oss-find-squats, and pypi-scan. Use before adding a new dependency, as a CI/CD gate on pull requests, when reviewing an AI-generated ("slopsquatting") dependency list, or when auditing a lockfile diff for a swapped package.

This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.

Repository
mukul975/Anthropic-Cybersecurity-Skills
Folder
skills/detecting-typosquatting-packages
License
Apache-2.0
GitHub stars
35,958
SKILL.md lines
231
Other files
4

Add detecting-typosquatting-packages to your agent

npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill detecting-typosquatting-packages

The command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.

Labelled for

More skills from mukul975/Anthropic-Cybersecurity-Skills

  1. exploiting-adcs-with-certipy

    Use Certipy to enumerate AD CS certificate authorities and templates over LDAP/RPC, then exploit ESC1-ESC16 misconfigurations - SAN abuse, NTLM relay to web enrollment (ESC8), Sha…

    Verified84B
  2. auditing-tls-certificate-transparency-logs

    Monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance, discover subdomains via CT data, and alert on suspicious certificate activity for owned do…

    Verified82B
  3. conducting-api-security-testing

    Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The te…

    Verified82B
  4. conducting-gdpr-compliance-assessment

    Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis…

    Verified82B
  5. detecting-container-runtime-threats-with-falco

    Deploys and operates Falco with the modern eBPF driver in Kubernetes and Docker, covering driver selection, Helm installation, output channels, and the built-in ruleset that detec…

    Verified82B
  6. performing-access-review-and-certification

    Designs and runs access review and certification campaigns-scoping, reviewer selection, risk-based prioritization, micro-certification, and remediation tracking-to verify user acc…

    Verified82B
  7. assessing-vector-and-embedding-weaknesses

    Test RAG vector stores (Pinecone, Qdrant, Weaviate, Chroma, pgvector, FAISS) for embedding inversion, cross-tenant data leakage, and data poisoning per OWASP LLM08:2025. Use when…

    Verified81B
  8. auditing-foundry-smart-contract-security

    Pre-deployment security audit of Solidity smart contracts in a Foundry project. Combines static analysis (Slither, Aderyn), symbolic execution (Mythril), and property-based testin…

    Verified81B

All skills in mukul975/Anthropic-Cybersecurity-Skills

Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.