Audit and prioritize software dependencies for security vulnerabilities across ecosystems.
npx skills add https://github.com/yaleh/meta-cc --skill dependency-health
Please help me install this Agent Skill. Skill: Dependency Health Source: https://github.com/yaleh/meta-cc/tree/main/.claude/skills/dependency-health Command: npx skills add https://github.com/yaleh/meta-cc --skill dependency-health
This Skill provides a security-first, policy-driven approach to dependency health, prioritization, batch remediation, and automated enforcement across languages and ecosystems.
Audit current dependencies, classify by risk, and plan a 2-week remediation batch.
High-intent search queries and answers about installing and using this skill.
Vulnerability scanning and batch remediation can be automated across Go, Node.js, Python, and other ecosystems by auditing dependencies, prioritizing by severity (critical same-day, high within a week, medium within a month), and grouping updates into safe, testable batches for faster PR cycles.
Policy-driven compliance validation integrates license policy checks directly into CI/CD workflows, scanning dependencies against governance rules and automatically blocking or reporting violations to ensure only approved licenses enter production.
Risk-based prioritization classifies vulnerabilities by severity level—critical, high, medium—and assigns remediation windows, enabling teams to focus immediate effort on the most dangerous exposures while batching lower-risk updates for sustainable cadence.
Freshness checks continuously monitor dependency age and update availability, flagging stale packages and enabling proactive upgrades before vulnerabilities accumulate, reducing both security risk and downstream maintenance burden.
Batch remediation groups related updates together and applies policy-driven compliance across all dependencies simultaneously, making it effective for complex dependency trees, monorepos, and multi-ecosystem projects where coordinated patching is critical.
Batch remediation reduces testing overhead, minimizes PR fragmentation, lowers merge conflict risk, and enables safer rollout of multiple patches in a single coordinated deployment while maintaining clear audit trails for compliance.
ashtonianAudit software dependencies across Go, Node.js, Python, Rust, and containers.
aanishsCompile HIPAA evidence from SQLite into a signed compliance report.
dmzoneillScan container images for security vulnerabilities using Quay.io before deployment.
ZpankzAutomate security-first dependency management with batch remediation and policy-driven compliance.
