Audit project dependencies for vulnerabilities and supply-chain risks.
npx skills add https://github.com/jtucker9/mystuff --skill dependency-audit-jtucker9
Please help me install this Agent Skill. Skill: dependency-audit Source: https://github.com/jtucker9/mystuff/tree/main/skills/security/dependency-audit Command: npx skills add https://github.com/jtucker9/mystuff --skill dependency-audit-jtucker9
Modern software relies on many dependencies, and insecure or abandoned packages create risk across the supply chain. This Skill identifies vulnerabilities and supply-chain risks in dependencies, enabling faster remediation and safer releases.
Run the audit against your project’s dependency files to generate a risk report and remediation plan.
High-intent search queries and answers about installing and using this skill.
Yes, transitive dependency analysis is supported. This Skill traces vulnerabilities through nested dependency trees in your project files, identifying supply-chain risks in inherited packages to produce a comprehensive risk report.
The best way to plan remediation for vulnerable dependencies is running this Skill to produce a prioritized risk report with actionable steps to upgrade or replace insecure components across supported ecosystems.
Yes, this vulnerability audit works with npm, pip, Cargo, Go, Ruby, and PHP. It performs multi-ecosystem vulnerability detection and license visibility scanning to identify supply-chain risks across diverse project environments.
You identify supply-chain risks in abandoned or insecure packages by running this audit against your project's dependency files, which surfaces known vulnerabilities and risk indicators to enable faster remediation and safer releases.
dhruvinrsoniAnalyze project dependencies by building graphs and detecting circular references.
lushly-devEvaluate dependency health, security, and lifecycle for software projects.
martinholovskyAutomate CI/CD pipeline security hardening with GitHub Actions.
mitchellvandusen-cellAudit Python dependencies for CVEs, outdated packages, licenses, and unused imports.
