skills.rest
benreceveur
benreceveurCOMMUNITY
Explore all skills by this author →
GitHub

dependency-guardian

Automate dependency management and security scanning across multiple package managers.

Updated Aug 23, 2026
Search Tags:#automation#security#npm#pip#dependencies#updates#vulnerabilities#cargo
One-click install
npx skills add https://github.com/benreceveur/claude-workflow-engine --skill dependency-guardian
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-guardian
Source: https://github.com/benreceveur/claude-workflow-engine/tree/main/skills/dependency-guardian
Command: npx skills add https://github.com/benreceveur/claude-workflow-engine --skill dependency-guardian

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, npm, yarn, pip, poetry, cargo, go, and includes scripts (resource) and examples (resource) and references (resource) components.

What problem does it solve?

This Skill automates the complex and critical tasks of managing project dependencies, including security vulnerability scanning, orchestrating updates, and ensuring license compliance. It significantly reduces manual overhead, mitigates security risks, and keeps your codebase healthy and up-to-date.

Core Features & Use Cases

  • Vulnerability Scanning: Automatically checks project dependencies against CVE databases, identifies critical risks, and provides clear remediation recommendations.
  • Intelligent Updates: Detects outdated packages, classifies updates (patch, minor, major), and can apply safe updates automatically, even creating pull requests.
  • License Compliance: Identifies dependency licenses, flags incompatibilities with your policy, and generates comprehensive compliance reports.
  • Use Case: Run a weekly scan on your project to automatically detect new vulnerabilities, identify outdated packages, and generate a pull request with safe patch updates, ensuring your codebase remains secure and current without manual intervention.

Quick Start

Scan the current project directory for security vulnerabilities in its dependencies.

Frequently Asked Questions about dependency-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically scan my project for security vulnerabilities in dependencies?▼

Vulnerability scanning checks your project's dependencies against CVE databases to identify security risks. This Skill automatically detects vulnerable packages across npm, pip, cargo, go mod, and other package managers, then provides remediation recommendations without manual intervention.

Can I automatically update outdated packages and create pull requests?▼

Yes. This Skill detects outdated dependencies, classifies updates as patch, minor, or major, and can automatically apply safe updates while creating separate pull requests. It runs tests after updates and rolls back on failure to ensure stability.

Does this work with multiple package managers and languages?▼

This Skill supports JavaScript/TypeScript (npm, yarn, pnpm), Python (pip, poetry, pipenv), Rust (cargo), Go (go mod), Ruby (bundler), and Java/JVM (maven, gradle) ecosystems in a single workflow.

How do I check if my dependencies comply with license policies?▼

License compliance scanning identifies dependency licenses, flags incompatibilities with your policies, and generates comprehensive compliance reports so you can audit legal risks across your project.

What's the best way to keep dependencies secure and current without manual work?▼

Automated dependency management runs weekly scans to detect vulnerabilities and outdated packages, generates pull requests with safe updates, and maintains compliance—reducing manual overhead while mitigating security risk.

Can I audit all dependencies across my entire project?▼

Dependency auditing generates detailed reports of all packages, their versions, licenses, and security status across supported ecosystems, providing visibility into your full dependency graph.

Related Skills

Explore More Software Engineering Skills→
Greenmamba29Greenmamba29

dependency-updater

Scan npm, pip, and cargo dependencies and create pull requests for updates.

Community
Intermediate
adnanmuelleradnanmueller
2

security-audit

Validate security controls and generate a deployment readiness report.

Community
Advanced
gztcodegztcode

requesting-code-review

Automate code review with static security scanning, quality gates, and an independent reviewer subagent.

Community
Advanced
x-cmdx-cmd
4.6k

x-osv

Query OSV database for package vulnerabilities and scan local projects.

Official
Intermediate