Automate CVE detection in project dependencies using pnpm audit.
npx skills add https://github.com/TrevorPLam/agency --skill dependency-audit-trevorplam
Please help me install this Agent Skill. Skill: dependency-audit Source: https://github.com/TrevorPLam/agency/tree/main/.windsurf/skills/dependency-audit Command: npx skills add https://github.com/TrevorPLam/agency --skill dependency-audit-trevorplam
Audits dependencies for known security vulnerabilities (CVEs) across the codebase and surfaces actionable remediation guidance to reduce risk.
Run the dependency-audit skill to scan all packages for CVEs and generate a prioritized remediation report.
High-intent search queries and answers about installing and using this skill.
Automating CVE dependency auditing across a monorepo involves scanning all project packages using pnpm audit to output JSON, then parsing the results to surface critical and high severity vulnerabilities in a remediation-ready report.
Yes, you can run pnpm audit for vulnerabilities to output JSON data, which is then parsed to filter for critical and high severity issues and formatted into a prioritized remediation report to reduce security risks.
Integrating weekly security scans for dependencies into CI involves configuring reproducible audit checks using pnpm audit, enabling automated CVE discovery and alerts on high-severity issues during development workflows.
Yes, dependency-audit applies across multiple package managers and monorepos, implementing reproducible audits using pnpm audit to detect CVEs and generate remediation-ready reports for the entire codebase.
Critical and high severity vulnerabilities are prioritized by parsing pnpm audit JSON output, filtering for these specific severities, and formatting them into a reproducible remediation-ready report to guide security fixes.
octoplorerManage JavaScript dependencies with pnpm workspaces and lockfiles.
KILWA73Detect dependency vulnerabilities during npm, pip, composer, cargo, and Go module installs.
hardw00tOrchestrate Semgrep, CodeQL, and Bandit scans across codebases.
armanzeroeightAudit project dependencies for known security vulnerabilities using package manager tools.
