dependency-audit-assistant

Run a dependency audit to scan your project for security vulnerabilities, outdated packages, and license compliance issues. The Skill auto-detects your package manager—npm, pip, go mod, Maven, Gradle, Bundler, Cargo, or Composer—executes the appropriate audit commands, and aggregates results by severity with CVE details and remediation recommendations.

Yes. The Skill analyzes licenses across npm, Python, Ruby, Java, Go, Rust, and PHP ecosystems, flagging potential license issues and verifying compliance before releases. It identifies the active package manager and runs license checks alongside vulnerability scanning.

Dependency auditing works with npm, Yarn, pnpm, pip, Poetry, Pipenv, Bundler, Maven, Gradle, Go modules, Cargo, and Composer. The Skill auto-detects which manager your project uses and runs the corresponding audit commands.

The Skill analyzes your dependency tree to detect outdated packages and transitive risks—duplicates and nested vulnerabilities. It generates a structured remediation plan with severity-based aggregation and a summary report.

No. The Skill auto-detects your project's package manager, so you run a single command regardless of whether you use npm, pip, go mod, or another ecosystem. It identifies the active manager and executes the appropriate audits automatically.

A full audit generates a structured remediation plan and summary report that aggregates vulnerabilities by severity, lists outdated packages with CVEs, flags license compliance issues, and identifies transitive dependency risks across your project.