dependency-audit

Audit and update Go, TypeScript/JavaScript, and Python dependencies for vulnerabilities.

Updated Jan 29, 2026

Search Tags:#security #vulnerability #npm #python #dependencies #audit #go

Ready to run

npx skills add https://github.com/semirm-dev/agent-army --skill dependency-audit-semirm-dev

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-audit
Source: https://github.com/semirm-dev/agent-army/tree/main/claude/skills/dependency-audit
Command: npx skills add https://github.com/semirm-dev/agent-army --skill dependency-audit-semirm-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill streamlines the process of identifying and mitigating security vulnerabilities and outdated packages within your project's dependencies, ensuring a more secure and up-to-date codebase.

Core Features & Use Cases

Vulnerability Scanning: Detects known security flaws in project dependencies across Go, Node.js, and Python.
Dependency Updates: Identifies available package updates and provides guidance on managing them.
Triage & Decision Making: Offers a structured workflow for assessing risks and deciding on remediation steps.
SBOM Generation: Creates Software Bill of Materials for compliance and security audits.

Quick Start

Run the dependency audit skill to check for vulnerabilities and outdated packages in the current project.

Frequently Asked Questions about dependency-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit project dependencies for security vulnerabilities across multiple languages?▼

Auditing project dependencies for security vulnerabilities is automated across Go, TypeScript/JavaScript, and Python environments. The process detects known security flaws, verifies module checksums, and triages CVE reports to mitigate risks in your codebase.

Can I check for outdated npm packages and Python dependencies at the same time?▼

Checking for outdated npm packages and Python dependencies simultaneously is supported. The tool identifies available package updates across Node.js, Python, and Go environments, providing structured guidance for planning and managing dependency updates.

How does vulnerability triaging work for CVE reports in a software development lifecycle?▼

Vulnerability triaging for CVE reports works by offering a structured workflow for assessing risks and deciding on remediation steps. It checks for known vulnerabilities and verifies module checksums to satisfy secure software development lifecycle requirements.

Can I generate a Software Bill of Materials (SBOM) for compliance and security audits?▼

Generating a Software Bill of Materials (SBOM) for compliance and security audits is a core feature. It creates an inventory of your project's dependencies to streamline security audits and ensure regulatory compliance.

What is the best way to plan package updates without breaking my Go and Node.js environments?▼

The best way to plan package updates safely is by identifying available package updates and assessing vulnerability risks first. This provides a structured update plan across Go, Node.js, and Python environments to avoid breaking changes.

Does dependency auditing work with checksum verification for Go modules?▼

Dependency auditing does work with checksum verification for Go modules. It verifies module checksums and checks for known vulnerabilities across Go, TypeScript/JavaScript, and Python environments to ensure a secure codebase.