Scan project dependency trees for known security vulnerabilities and report findings.
npx skills add https://github.com/qvidal01/claude-code-skills --skill audit-deps-qvidal01
Please help me install this Agent Skill. Skill: audit-deps Source: https://github.com/qvidal01/claude-code-skills/tree/main/audit-deps Command: npx skills add https://github.com/qvidal01/claude-code-skills --skill audit-deps-qvidal01
This Skill automates the process of identifying vulnerabilities in a project's dependencies, providing a comprehensive report without applying fixes.
Run the 'audit-deps' skill to perform a vulnerability audit on your project dependencies.
High-intent search queries and answers about installing and using this skill.
Dependency vulnerability auditing identifies and describes security flaws in a project's dependency tree. It performs scanning, reporting, and cross-referencing with previous audits to report severity, basis, source, package, and reachability without applying fixes.
Dependency vulnerability auditing requires native vulnerability scanners like osv-scanner and bundle-audit, plus Dependabot for GitHub-hosted repositories. You must have these tools installed and configured in your development environment to execute the scanning and cross-referencing processes.
Dependency vulnerability auditing reports the severity, basis, source, package, and reachability of vulnerabilities found in a project's dependency tree. It scans dependencies, cross-references findings with previous audits, and generates a comprehensive report without applying any fixes.
Dependency vulnerability auditing identifies security flaws in a project's dependency tree without applying fixes. It generates comprehensive reports detailing the severity, basis, source, package, and reachability of vulnerabilities, making it suitable for code audits and deployment preparation.
Dependency vulnerability auditing does not apply fixes to identified security flaws. It strictly performs scanning, reporting, and cross-referencing with previous audits to describe the severity and reachability of vulnerabilities, leaving remediation to the developer.
xtrm-devBootstrap a GitHub security pipeline with secret scanning, SAST, and dependency checks.
BerryKuipersAudit npm dependencies for security vulnerabilities and outdated packages.
CenredJunAutomate and validate CI/CD pipelines and infrastructure-as-code configurations.
sadie100Audit infrastructure, applications, and development processes for security vulnerabilities.
