Audit and remediate dependency vulnerabilities in Go and Node.js modules.
npx skills add https://github.com/authgear/authgear-server --skill dep-audit-authgear
Please help me install this Agent Skill. Skill: dep_audit Source: https://github.com/authgear/authgear-server/tree/main/.claude/skills/dep_audit Command: npx skills add https://github.com/authgear/authgear-server --skill dep-audit-authgear
This Skill automates the multi-language dependency vulnerability audit so you can resolve Go and Node security issues without juggling separate procedures or missing critical modules.
Start the audit by running govulncheck in every Go module and npm audit across the portal, authui, portalgraphiql, and scripts/npm directories as described in the SKILL.md instructions.
High-intent search queries and answers about installing and using this skill.
Auditing dependency vulnerabilities across Go and Node.js modules requires running govulncheck per Go module and npm audit per package.json directory, then applying fixes that respect semver constraints while deferring major upgrades.
Handling breaking changes during npm dependency upgrades involves removing stale overrides, gathering breaking-change reports per directory, and applying npm audit fix only for patchable issues to ensure builds validate before committing.
Govulncheck works with nested Go modules by running the tool per module, comparing versions, deferring breaking upgrades, and running go mod tidy on every module that changes to maintain consistency.
Cleaning up stale npm overrides during vulnerability remediation involves auditing each package.json directory in sequence, removing outdated overrides, and applying npm audit fix to patch security issues without breaking semver constraints.
Validating builds before committing dependency updates requires running govulncheck and npm audit fixes across all Go modules and Node.js directories, then confirming builds pass before staging and committing the resulting changes.
Deferring major version upgrades during a dependency audit is necessary when fixes must respect semver constraints, ensuring patchable vulnerabilities are resolved while breaking changes are documented and major upgrades are postponed.
adrien-barretAudits project dependencies for vulnerabilities, outdated versions, license risks, and supply-chain issues.
rauell1Upgrade Next.js projects to the latest release with codemods and dependency updates.
itou-daikiDiagnose and fix Go build errors, vet warnings, and lint issues.
ZpankzAutomate security-first dependency management with batch remediation and policy-driven compliance.
