Dep audit

Skill justnau1020/claude-os/skills/code-quality/dep-audit

Run a security audit and dependency check on project dependencies. Use when you want to check for vulnerabilities, audit packages, or update outdated dependencies.From its SKILL.md

Install

npx -y skills add justnau1020/claude-os --skill dep-audit

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

3 stars3 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
runs commandsInstructs the agent to run 5 commands, including `pip-audit` and 4 more.

SKILL.md

1.2 KB, 216 tokens by cl100k_base, as published. Nobody here has run it

Dependency Audit

Run a security and freshness audit of project dependencies.

Steps

1. Check for known vulnerabilities

For Python projects:

pip-audit

If pip-audit is not installed: pip install pip-audit

For Node.js projects:

npm audit

2. Check for outdated packages

For Python:

pip list --outdated

For Node.js:

npm outdated

3. Report

For each issue found:

Vulnerability: Package name, CVE ID, severity, affected version, fixed version
Outdated: Package name, current version, latest version, whether upgrade is safe

4. Fix recommendations

For vulnerabilities: upgrade to the fixed version immediately
For outdated packages: check changelog for breaking changes before upgrading
Update dependency config (pyproject.toml, package.json, etc.) with new version constraints
Run the full test suite after any dependency change

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.