# Dependency Audit

> Audits the dependency supply chain: CVEs in packages, secrets about to be committed, lockfile int…

Audits the dependency supply chain: CVEs in packages, secrets about to be committed, lockfile integrity, and wires checks into CI as a merge gate. Not app-level security.

- Page: https://ss33.ai/skills/shipshitdev/dependency-audit-60687425298
- Publisher: shipshitdev
- Category: [Security](https://ss33.ai/skills/category/security-w9g95g) › [Misc](https://ss33.ai/skills/category/security-w9g95g/misc-ksbyjk)
- Source: https://github.com/shipshitdev/skills/blob/366150f6ff4abf908164df8b94a6a49d65f46295/bundles/security/skills/dependency-audit/SKILL.md

## Skill

This skill's licence does not allow redistribution, so the store does not serve its text. Get it from the author: https://github.com/shipshitdev/skills/blob/366150f6ff4abf908164df8b94a6a49d65f46295/bundles/security/skills/dependency-audit/SKILL.md