ln-625-dependencies-auditor

Name: ln-625-dependencies-auditor
Availability: InStock
Author: dorrio

Audit project dependencies for outdated packages, unused libraries, and CVEs.

Updated Dec 11, 2025

Search Tags:#security #vulnerability #dependencies #outdated packages #auditor #unused dependencies

Ready to run

npx skills add https://github.com/dorrio/sorteo-app-generator --skill ln-625-dependencies-auditor-dorrio

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ln-625-dependencies-auditor
Source: https://github.com/dorrio/sorteo-app-generator/tree/main/.agent/skills/ln-625-dependencies-auditor
Command: npx skills add https://github.com/dorrio/sorteo-app-generator --skill ln-625-dependencies-auditor-dorrio

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need to maintain a healthy and secure software supply chain by identifying outdated, unused, or vulnerable packages within a project.

Core Features & Use Cases

Outdated Package Detection: Identifies packages that have newer versions available, helping to keep dependencies up-to-date with security patches and new features.
Unused Dependency Analysis: Pinpoints packages that are installed but not being used, reducing project bloat and potential security risks.
Vulnerability Scanning: Scans for known Common Vulnerabilities and Exposures (CVEs) associated with project dependencies, providing CVSS scores for severity assessment.
Use Case: A development team can use this skill before a major release to ensure all dependencies are current and free from known security flaws, preventing potential breaches and improving overall code quality.

Quick Start

Run the dependencies auditor skill in full mode to check for outdated packages, unused dependencies, and security vulnerabilities.

Frequently Asked Questions about ln-625-dependencies-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan project dependencies for security vulnerabilities and CVEs?▼

To scan dependencies for security vulnerabilities, use the vulnerabilities_only mode to detect known CVEs and assess their CVSS severity scores. This targets security assessments without evaluating package usage or version updates.

What is the best way to find unused libraries and outdated packages in a project?▼

Finding unused libraries and outdated packages requires running the dependencies auditor in full mode. This comprehensively analyzes your project to pinpoint installed but unused packages and identify available newer versions.

How does a dependencies auditor improve software supply chain security?▼

A dependencies auditor improves supply chain security by detecting vulnerable packages and identifying unused libraries that introduce risks. It ensures packages are up-to-date with security patches before major releases.

Can I check for CVEs without scanning for outdated packages?▼

Yes, you can check exclusively for CVEs by using the vulnerabilities_only mode. This bypasses the outdated package and unused dependency analysis to perform a targeted security vulnerability assessment.

When should I run a full dependency audit versus a targeted vulnerabilities scan?▼

Run a full dependency audit before major releases to comprehensively check for outdated packages, unused libraries, and CVEs. Use a targeted vulnerabilities scan for quick, routine security assessments of known flaws.