skills.rest
fusengine
fusengineCOMMUNITY
Explore all skills by this author →
Website𝕏@fusengineGitHub

dependency-audit

Audit project dependencies for known security vulnerabilities using ecosystem-specific tools.

22|3|Updated Jan 10, 2026
Search Tags:#security#vulnerability#npm#pip#dependencies#audit#cargo
One-click install
npx skills add https://github.com/fusengine/agents --skill dependency-audit-fusengine
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-audit
Source: https://github.com/fusengine/agents/tree/main/plugins/security-expert/skills/dependency-audit
Command: npx skills add https://github.com/fusengine/agents --skill dependency-audit-fusengine

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies known security vulnerabilities within your project's dependencies, helping you maintain a secure software supply chain.

Core Features & Use Cases

  • Automated Scanning: Detects vulnerabilities across multiple package managers (npm, pip, cargo, etc.).
  • Severity Classification: Ranks vulnerabilities by impact (CRITICAL, HIGH, MEDIUM, LOW).
  • Fix Suggestions: Provides guidance on updating dependencies to patched versions.
  • Use Case: Before deploying your application, run this Skill to ensure no critical vulnerabilities are present in your project's libraries, preventing potential security breaches.

Quick Start

Run a dependency audit for the npm ecosystem and attempt to fix any vulnerabilities found.

Frequently Asked Questions about dependency-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit project dependencies for known security vulnerabilities?▼

To audit dependencies for security vulnerabilities, this Skill detects your package manager from lock files and runs native audit commands like npm audit, pip-audit, or cargo audit to identify known issues.

What's the best way to fix npm vulnerabilities found during a dependency audit?▼

To fix npm vulnerabilities found during a dependency audit, the Skill supports automated fixing for compatible ecosystems like npm and Rust, providing guidance on updating dependencies to patched versions.

Does this dependency audit tool work with Python pip and Rust cargo ecosystems?▼

Yes, this dependency audit tool works with Python pip and Rust cargo ecosystems by executing native commands like pip-audit and cargo audit to scan project libraries for known security issues.

How are vulnerabilities classified by severity during a security audit?▼

During a security audit, vulnerabilities are parsed and classified by severity, ranking them by impact into CRITICAL, HIGH, MEDIUM, and LOW categories to help prioritize your software supply chain fixes.

How do I run an npm audit and automatically fix vulnerabilities before deployment?▼

You can run an npm audit and automatically fix vulnerabilities by letting the Skill detect your npm lock file, execute the native audit command, and apply automated fixes for compatible ecosystems before deployment.

Related Skills

Explore More Software Engineering Skills→
alxayoalxayo
17

guarddog-security-scan

Audit Python and Node.js dependencies for malware before installation.

Community
Intermediate
lklimeklklimek
1

review-dependency

Scan Go, Rust, Python, and Node.js dependencies for known vulnerabilities.

Community
Advanced
cybersecwomancybersecwoman
5

supply-chain-attack-recon

Analyze package dependencies, CI/CD configurations, and artifacts for supply-chain vulnerabilities.

Community
Advanced
cmaennercmaenner
5

code-review-security

Scan codebases for security vulnerabilities and dependency risks.

Community
Intermediate