audit

Audit dependencies for vulnerabilities and scan for committed secrets.

10|2|Updated Mar 2, 2026
One-click install
npx skills add https://github.com/dixus/claudeframework --skill audit-dixus
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/dixus/claudeframework/tree/main/.claude/skills/audit
Command: npx skills add https://github.com/dixus/claudeframework --skill audit-dixus

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit dependencies for vulnerabilities and scan for committed secrets. Use periodically or when security alerts flag a dependency.

Core Features & Use Cases

  • Secret scan before dependency audit.
  • Detect the package manager by lockfiles and run appropriate audit commands.
  • Apply non-breaking fixes and report findings, then re-run tests.

Quick Start

Run an automated dependency audit to identify vulnerabilities and secrets, then apply safe fixes and re-test.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit dependencies for vulnerabilities across multi-language projects?

Dependency auditing detects vulnerable packages by auto-detecting your package manager via lockfiles and running the appropriate audit commands across npm, yarn, pnpm, pip/poetry, Cargo, and Go projects in your repository.

How can I scan a project for committed secrets before updating dependencies?

Scanning for committed secrets occurs before the dependency audit, identifying sensitive credentials committed to the repository to prevent accidental exposure during vulnerability fixes or package updates.

Does dependency auditing support Python projects using pip and poetry?

Dependency auditing supports Python projects using pip and poetry by detecting their lockfiles and running the appropriate audit commands to identify vulnerabilities in installed packages.

What is the safest way to fix vulnerable dependencies without breaking my code?

The safest way to fix vulnerable dependencies is applying non-breaking fixes, which updates packages to secure versions, reports findings with rationale, and re-runs tests to ensure no regressions.

Can I audit both npm and Cargo dependencies in the same repository?

You can audit both npm and Cargo dependencies in the same repository because the tool detects multiple package managers by their lockfiles and runs the corresponding audit commands for multi-language repos.