Scan project manifests and lockfiles to identify known CVEs.
npx skills add https://github.com/Q16G/aster --skill dependency-audit-q16g
Please help me install this Agent Skill. Skill: dependency-audit Source: https://github.com/Q16G/aster/tree/main/skills/code-audit/dependency-audit Command: npx skills add https://github.com/Q16G/aster --skill dependency-audit-q16g
This skill helps teams quickly identify known vulnerabilities in project dependencies to reduce supply-chain risk and remediation time.
Install and run the dependency audit tool against your project to enumerate insecure dependencies and suggested upgrades.
High-intent search queries and answers about installing and using this skill.
To scan project dependencies for known vulnerabilities, you analyze manifests and lockfiles across Go, Node.js, Python, and Java. This surfaces CVEs and provides a prioritized vulnerability list with upgrade recommendations and reproducible remediation steps.
A dependency audit identifies CVEs by scanning manifest files and lockfiles across ecosystems like Go, Node.js, Python, and Java. It checks declared packages against known vulnerabilities to surface security issues, prioritize findings by severity, and reduce supply-chain risk.
Yes, the vulnerability scan works with Python and Java ecosystems, alongside Go and Node.js. It parses the manifest files and lockfiles for these environments to discover insecure dependencies and provides upgrade guidance with compatibility notes.
Yes, you can integrate dependency vulnerability checks into CI/CD pipelines to automatically alert on risky dependencies. The audit generates a remediation plan with prioritized findings and reproducible steps directly within your workflow.
The best way to prioritize dependency upgrades for security is by severity. The audit outputs a prioritized vulnerability list based on risk, providing specific upgrade recommendations and compatibility notes to ensure safe remediation.
thatrebeccaraeScan Node.js, Python, Rust, and Go manifests for outdated packages, advisories, and license issues.
chicanoandres702Audit npm and Python dependencies and propose safe upgrade targets.
GeneralReasoningScan dependency lock files offline with Trivy and JSON output.
brenordvAudit software systems for security vulnerabilities and regulatory compliance.
