Audit project dependencies for known CVEs across languages and package managers.
npx skills add https://github.com/Pageloom/weft-id --skill deps-pageloom
Please help me install this Agent Skill. Skill: deps Source: https://github.com/Pageloom/weft-id/tree/main/.claude/skills/deps Command: npx skills add https://github.com/Pageloom/weft-id --skill deps-pageloom
This skill helps teams identify and mitigate security risks by auditing project dependencies for known CVEs across ecosystems.
Install and run the included scan script to detect CVEs in your dependencies.
High-intent search queries and answers about installing and using this skill.
You can audit dependencies for known CVEs by inspecting lockfiles and manifest files across multiple languages and package managers to surface risks in the dependency graph. This skill automates the scanning process using standard vulnerability databases.
Dependency vulnerability scanning identifies known CVEs in your project dependencies by analyzing lockfiles. It secures CI pipelines by detecting risks early, recording findings to .claude/ISSUES.md, and providing remediation guidance without altering code.
Yes, this skill supports auditing production dependencies for software security by applying standard tools like pip-audit across ecosystems. It inspects manifest and lockfiles to detect vulnerabilities and generates a remediation plan.
No, dependency management auditing does not automatically apply code changes. It records vulnerability findings to .claude/ISSUES.md and provides remediation guidance, leaving the actual code updates to your team.
The best way to create a remediation plan for dependency graph risks is to run an automated scan that inspects lockfiles and manifest files. The skill records identified CVEs and provides specific guidance for mitigating each risk.
dhruvinrsoniAnalyze project dependencies by building graphs and detecting circular references.
dimagiUpgrade Python or JavaScript dependencies to a safe target version and create a documented pull request.
not-subhuOrchestrate dependency audits, static application security testing, and privacy dataflow analysis.
Muath2000Build and manage network scanning engines for asset discovery and vulnerability detection.
