Audit npm, Python, Rust, and Go dependencies for CVEs and outdated versions.
npx skills add https://github.com/usetheodev/theo-ui --skill deps-audit-usetheodev
Please help me install this Agent Skill. Skill: deps-audit Source: https://github.com/usetheodev/theo-ui/tree/main/.claude/skills/deps-audit Command: npx skills add https://github.com/usetheodev/theo-ui --skill deps-audit-usetheodev
Audit project dependencies for known vulnerabilities (CVEs) and outdated versions across npm, Python, Rust, and Go. Auto-detects manifests; runs osv-scanner + npm audit + npm outdated + pip-audit + cargo audit + govulncheck; cross-references a plan's ## Dependencies section; produces diff-style bump suggestions. NEVER edits manifests. Use after /edge-case-plan, before /plan-confidence — or standalone for periodic audits.
Run the /deps-audit command to generate a read-only report of vulnerable and outdated dependencies.
High-intent search queries and answers about installing and using this skill.
Dependency security audit tools detect known CVEs by running osv-scanner, npm audit, pip-audit, cargo audit, and govulncheck against your project manifests, generating read-only diff-style bump recommendations without directly editing your files.
To check for outdated packages, the audit executes npm outdated and pip-audit alongside other ecosystem scanners, analyzing your manifests to produce diff-style bump recommendations for outdated dependencies without modifying the files.
No, the dependency audit never edits manifests. It performs a read-only scan of your files and outputs diff-style bump recommendations, ensuring your package manifests remain untouched during the vulnerability detection process.
Yes, the audit supports plan-bound workflows by cross-referencing a plan's Dependencies section to validate and suggest changes. This allows you to align dependency bumps with your project plan during release cycles.
Cross-ecosystem vulnerability detection uses osv-scanner, npm audit, npm outdated, pip-audit, cargo audit, and govulncheck to identify known CVEs and outdated dependencies across npm, Python, Rust, and Go manifests.
Run a dependency security audit after planning and before confidence checks, or as a standalone periodic review. It validates dependencies during release cycles, ensuring your manifests are checked against the latest CVE databases.
bizzybaeAnalyze strategic plans for CEO-level risks and expansion opportunities.
NVIDIACheck release progress, bump straggling issues, and prepare annotated Git tags.
MayaDispelerApply security checks across CI/CD pipelines with GitLeaks, Semgrep, Snyk, Trivy, and cosign.
fusengineAudit project dependencies for known security vulnerabilities using ecosystem-specific tools.
