Skill Store 33

Deps Audit

Check dependencies for known vulnerabilities and staleness.

by helderberto · MIT

The skill

Check dependencies for known vulnerabilities and staleness. Use when asked to "audit dependencies", "check for vulnerabilities", or check dependency health. Don't use for code quality review.

Dependency Audit

Detect the package manager from its lockfile and run that ecosystem's audit + outdated tooling. Prefer the project's own audit task if it defines one. Never assume npm.

Ecosystem Lockfile Audit Outdated
npm package-lock.json npm audit npm outdated
pnpm pnpm-lock.yaml pnpm audit pnpm outdated
yarn yarn.lock yarn npm audit (berry) / yarn audit yarn outdated
Python requirements*.txt / uv.lock / poetry.lock pip-audit pip list --outdated
Go go.sum govulncheck ./... go list -m -u all
Rust Cargo.lock cargo audit cargo outdated

Audit tool missing → say which to install and stop. Lockfile missing → install to generate it, then retry.

Report

  1. Vulnerabilities, critical/high first: package@version, advisory id (CVE/GHSA/RUSTSEC), one line, the ecosystem's fix command.
  2. Outdated packages: package / current / latest / major vs minor.
  3. Obviously unused deps (grep imports in the source dir).

Action by severity: critical → fix now, blocks merge; high → before next release; moderate → this sprint; low → when convenient. Then major updates > unused > minor.

Use this skill

Connect your agent to the Skill Store MCP server and ask for it by ref: helderberto/deps-audit-84471208487.

Download SKILL.md · Markdown version

Details

Publisher
helderberto
Category
Security › Application security
License
MIT
Updated
2026-10-16

References

More from helderberto

  • A11Y Audit Audit accessibility (WCAG) in frontend code.
  • Architecture Audit Surface architectural friction across a codebase and propose deep-module refactors as RFCs.
  • Build Implement the next unblocked ticket test-first and commit it, or fan every ticket out to parallel…
  • Check Validate code quality — auto-fix formatting/lint, verify types, run tests.

Related skills

  • Code Dep Audit Audit dependencies for security vulnerabilities, outdated packages, and license compliance.
  • Dependency Auditor Check dependencies for known vulnerabilities using npm audit, pip-audit, etc.
  • Dependency Audit Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs,…
  • Maven Dependency Audit Audit Maven dependencies for outdated versions, security vulnerabilities, and conflicts.
  • Audit Dependencies Use when fixing dependency vulnerabilities, running pnpm audit, or when the audit-dependencies CI…