dependency-auditor

Audit project dependencies for outdated packages, unused imports, and known vulnerabilities.

Updated Mar 4, 2026

Search Tags:#security #dependencies #audit #vulnerabilities #outdated packages #unused imports

Ready to run

npx skills add https://github.com/djpTester44/iocane --skill dependency-auditor-djptester44

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-auditor
Source: https://github.com/djpTester44/iocane/tree/main/%7B%7Bcookiecutter.framework_folder%7D%7D/skills/dependency-auditor
Command: npx skills add https://github.com/djpTester44/iocane --skill dependency-auditor-djptester44

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps maintain the health and security of a project by identifying potential problems within its dependencies.

Core Features & Use Cases

Dependency Analysis: Lists all direct dependencies and their versions.
Outdated Package Detection: Flags packages that have newer versions available.
Vulnerability Scanning: Checks for known security vulnerabilities (CVEs) in dependencies.
Unused Dependency Identification: Identifies packages that are installed but not imported in the codebase.
Use Case: Before a major release, run this audit to ensure all dependencies are up-to-date and free from critical vulnerabilities.

Quick Start

Use the dependency-auditor skill to audit the dependencies in the project located at /path/to/your/project.

Frequently Asked Questions about dependency-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit dependencies for security vulnerabilities and outdated packages?▼

To audit dependencies for security vulnerabilities and outdated packages, provide your project root directory. The skill analyzes dependency files like pyproject.toml and requirements.txt to report package versions, flag known CVEs, and identify updates.

How can I find unused imports and dependencies in my Python project?▼

You can find unused imports and dependencies by running an audit on your project root. The skill scans the codebase to identify packages declared in dependency files but never actually imported in your code.

Does the dependency audit work with pyproject.toml and requirements.txt files?▼

Yes, the dependency audit works directly with pyproject.toml and requirements.txt files. It parses these specific dependency manifests to extract package versions and check them against known vulnerability databases.

What is the best way to check for known CVEs before a major project release?▼

The best way to check for known CVEs before a major release is to run a comprehensive dependency audit. This scans your project root to ensure all dependencies are up-to-date and free from critical security vulnerabilities.

Why do I need to provide a project_root path for a vulnerability scan?▼

You need to provide a project_root path because the vulnerability scan requires access to your local dependency files and source code. This allows the auditor to parse manifests like requirements.txt and detect unused imports.

What limitations should I expect when scanning dependencies for outdated packages?▼

When scanning dependencies for outdated packages, the analysis is limited to parsing declared manifests like pyproject.toml and requirements.txt. It evaluates direct dependencies and known vulnerabilities but does not perform deep recursive source builds.