skills.rest
npow
npowCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dependency-audit

Audit dependency health and security signals across configured repositories.

4|Updated Feb 23, 2026
Search Tags:#dependency audit#repository analysis#renovate#dependabot#security vulnerabilities#cve scanning
One-click install
npx skills add https://github.com/npow/claude-skills --skill dependency-audit-npow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-audit
Source: https://github.com/npow/claude-skills/tree/main/dependency-audit
Command: npx skills add https://github.com/npow/claude-skills --skill dependency-audit-npow

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams identify dependency staleness, known CVE references, overdue security updates, and gaps in dependency maintenance across multiple repositories.

Core Features & Use Cases

  • Dependency Inventory: Inspects common dependency files across Python, Java, JavaScript, TypeScript, and Go repositories.
  • Security and Staleness Checks: Searches for CVE references, vulnerability-related mentions, deprecated packages, pinned versions, and outdated dependency patterns.
  • Update PR Tracking: Reviews open Dependabot and Renovate pull requests, calculates their age, highlights security-critical updates, and flags stale items older than 30 days.
  • Team-Level Reporting: Produces a complete audit report with ecosystem summaries, security findings, open update PRs, and actionable risk flags.
  • Use Case: Run a monthly audit across all configured repositories to identify unmerged security updates and repositories without an active dependency update mechanism.

Quick Start

Use the dependency-audit skill to audit all repositories configured in the shared dependency audit configuration and deliver the completed report as HTML.

Frequently Asked Questions about dependency-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit repository dependencies for security vulnerabilities and outdated packages?▼

To audit repository dependencies, you inspect dependency files across Python, Java, JavaScript, TypeScript, and Go repositories to identify CVE references, deprecated packages, and outdated dependency patterns, generating a comprehensive risk report.

What is the best way to track stale Dependabot and Renovate pull requests across multiple repositories?▼

Tracking stale Dependabot and Renovate pull requests involves reviewing open update PRs, calculating their age deterministically, highlighting security-critical updates, and flagging items older than 30 days for team-level remediation.

Does dependency auditing work with Go and Java repositories?▼

Dependency auditing works with Go and Java repositories by inspecting their common dependency files to detect pinned versions, vulnerability mentions, and deprecated packages alongside Python, JavaScript, and TypeScript ecosystems.

How do I generate an HTML report for a monthly dependency review?▼

Generating an HTML report for a monthly dependency review requires scanning configured repositories for staleness and security signals, then delivering a complete audit summary with ecosystem findings, open update PRs, and actionable risk flags.

Do I need Sourcegraph search and GitHub CLI access to scan for CVE references?▼

You need Sourcegraph search and GitHub CLI access to scan for CVE references and calculate deterministic PR ages across configured repositories, ensuring accurate vulnerability tracking and update PR status retrieval.

Related Skills

Explore More Software Engineering Skills→
jasonmeansjasonmeans
2

sourcegraph-search

Integrates with Sourcegraph to search code, commits, diffs, symbols, and DeepSearch across repositories.

Community
Advanced
awinogradovawinogradov
5

dependabot:resolve

Review and sequentially merge Dependabot pull requests with risk reports.

Community
Intermediate
Soyio-idSoyio-id

prepare-security-prs

Triage dependency bot pull requests and prepare safe merge actions.

Official
Advanced
brucesongsbrucesongs
60

vulnerability-assessment

Identify and prioritize security weaknesses using automated scanning and CVE analysis.

Community
Advanced