dep-verify-guard
有效防止拼写/幻觉包导致的供应链攻击
需要访问外部包注册表查询，可能泄露环境信息
在安装前校验包名是否真实存在并非拼写欺骗，阻止恶意依赖。
在要新增第三方包或运行安装命令前先查证包名是真实存在而非拼写欺骗，防止被 typosquat 或模型幻觉引入恶意依赖。适用于有人说要 install/add/import 某个包，或自动化 agent 引入新依赖时，先做存在性和必要性校验再放行。特点是直接对接真实注册表（npm/PyPI/crates），把‘能不能装’变成一项强制检查。
▸ 展开 SKILL.md 英文原文
Blocks hallucinated, typosquatted/slopsquatted, and unnecessary dependencies from being installed by verifying each new package against the real registry (npm/PyPI/crates) before it's added. Best used reactively before adding, importing, or installing any dependency. Use when the user says "install X", "add a package for", "npm/pip/cargo add", "import", or when a coding agent introduces a new third-party import. DO NOT USE for secret exposure (use no-secret-leak-guard) or general diff review (use clean-diff-guard); this guard is specifically about dependency existence, typosquatting, and necessity.
帮我安装这个 skill：https://raw.githubusercontent.com/mohamedzhioua/proofguard/main/skills/dep-verify-guard/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/mohamedzhioua/proofguard/main/skills/dep-verify-guard/SKILL.md"# dep-verify-guard Never install a package on faith. LLMs predictably hallucinate plausible-sounding package names, and attackers pre-register those exact names on public registries so the hallucination becomes a working, malicious install the moment an agent runs `npm install <name>`. This guard makes "does this package actually exist, and do we actually need it" a checked step, not an assumption. Research on this failure mode (CSA, Unit42, and related slopsquatting studies) found that LLM code generation hallucinates non-existent package names in a meaningful fraction of dependency-adding requests, and that a large fraction recur (reported in 2025–2026 slopsquatting research) across repe