skills.rest
dorrio
dorrioCOMMUNITY
Explore all skills by this author →
GitHub

ln-625-dependencies-auditor

Audit project dependencies for outdated packages, unused libraries, and CVEs.

Updated Dec 11, 2025
Search Tags:#security#vulnerability#dependencies#outdated packages#auditor#unused dependencies
One-click install
npx skills add https://github.com/dorrio/sorteo-app-generator --skill ln-625-dependencies-auditor-dorrio
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ln-625-dependencies-auditor
Source: https://github.com/dorrio/sorteo-app-generator/tree/main/.agent/skills/ln-625-dependencies-auditor
Command: npx skills add https://github.com/dorrio/sorteo-app-generator --skill ln-625-dependencies-auditor-dorrio

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need to maintain a healthy and secure software supply chain by identifying outdated, unused, or vulnerable packages within a project.

Core Features & Use Cases

  • Outdated Package Detection: Identifies packages that have newer versions available, helping to keep dependencies up-to-date with security patches and new features.
  • Unused Dependency Analysis: Pinpoints packages that are installed but not being used, reducing project bloat and potential security risks.
  • Vulnerability Scanning: Scans for known Common Vulnerabilities and Exposures (CVEs) associated with project dependencies, providing CVSS scores for severity assessment.
  • Use Case: A development team can use this skill before a major release to ensure all dependencies are current and free from known security flaws, preventing potential breaches and improving overall code quality.

Quick Start

Run the dependencies auditor skill in full mode to check for outdated packages, unused dependencies, and security vulnerabilities.

Frequently Asked Questions about ln-625-dependencies-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan project dependencies for security vulnerabilities and CVEs?▼

To scan dependencies for security vulnerabilities, use the vulnerabilities_only mode to detect known CVEs and assess their CVSS severity scores. This targets security assessments without evaluating package usage or version updates.

What is the best way to find unused libraries and outdated packages in a project?▼

Finding unused libraries and outdated packages requires running the dependencies auditor in full mode. This comprehensively analyzes your project to pinpoint installed but unused packages and identify available newer versions.

How does a dependencies auditor improve software supply chain security?▼

A dependencies auditor improves supply chain security by detecting vulnerable packages and identifying unused libraries that introduce risks. It ensures packages are up-to-date with security patches before major releases.

Can I check for CVEs without scanning for outdated packages?▼

Yes, you can check exclusively for CVEs by using the vulnerabilities_only mode. This bypasses the outdated package and unused dependency analysis to perform a targeted security vulnerability assessment.

When should I run a full dependency audit versus a targeted vulnerabilities scan?▼

Run a full dependency audit before major releases to comprehensively check for outdated packages, unused libraries, and CVEs. Use a targeted vulnerabilities scan for quick, routine security assessments of known flaws.

Related Skills

Explore More Software Engineering Skills→
endorlabsendorlabs
4

endor-dependency-provenance

Resolve package-version provenance by manifest path and source ref or sha.

Official
Intermediate
sepehrrezaeisepehrrezaei

maven-cve-full-resolver

Remediate Maven CVE vulnerabilities across research, strategy, and fix phases.

Community
Advanced
AradotsoAradotso
11

npm-security-best-practices

Harden npm, pnpm, and Bun installs against supply-chain attacks.

Official
Advanced
armanzeroeightarmanzeroeight
29

dependency-audit

Audit project dependencies for known security vulnerabilities using package manager tools.

Community
Intermediate