Cybersecurity
Detecting Typosquatting Packages
The skill scans npm, PyPI, and crates.io for misspelled or typosquatted package names before installation, using edit‑distance, keyboard‑proximity, and known‑target corpus matching. It integrates with CI/CD pipelines, pull‑request reviews, AI‑generated dependency lists, and lockfile audits to prevent malicious or accidental dependency swaps. This protects developers and organizations from security risks and brand misuse.
- Publisher / source
- Cybersecurity Skills (Community)
- Upstream record
- mukul975/Anthropic-Cybersecurity-Skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
90da7ab43f9986923cb2bdc45c1a7cd6d8be18b6f7f5430288547476b07cbdb3