Dependency audit

Skill fusengine/agents/plugins/security-expert/skills/dependency-audit

Audit project dependencies for known vulnerabilities using ecosystem-specific tools (npm audit, composer audit, pip-audit, cargo audit, etc). Use when: running ecosystem-specific vulnerability scans across project dependencies, with optional auto-fix.From its SKILL.md

Install

npx -y skills add fusengine/agents --skill dependency-audit

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

22 stars22 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.4 KB, 276 tokens by cl100k_base, as published. Nobody here has run it

Dependency Audit Skill

Overview

Run dependency vulnerability checks using native package manager audit tools.

Supported Ecosystems

Ecosystem	Tool	Auto-fix
npm/yarn/pnpm/bun	`npm audit` / `yarn audit`	Yes
PHP/Composer	`composer audit`	Manual
Python/pip	`pip-audit` / `safety check`	Manual
Rust/Cargo	`cargo audit`	Yes
Go	`govulncheck ./...`	Manual
Swift/CocoaPods	`pod audit`	Manual
Ruby/Bundler	`bundle audit`	Manual

Workflow

Detect package manager from lock files
Run appropriate audit command
Parse output for vulnerabilities
Classify by severity (CRITICAL/HIGH/MEDIUM/LOW)
Suggest fix versions or alternatives

Auto-Fix Support

When --fix flag is used:

npm audit fix for safe updates
cargo audit fix for Rust
Manual guidance for other ecosystems

References

What ships with it: 2 files

2.5 KB alongside SKILL.md

references/

audit-commands.md1.5 KB
templates/audit-report.md1009 B