skills.rest
ClearMeasureLabs
ClearMeasureLabsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

npm-audit

Scan package.json files and run npm audit for dependency vulnerabilities.

3|2|Updated Aug 1, 2025
Search Tags:#automation#security#vulnerability#npm#dependencies#audit
One-click install
npx skills add https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders --skill npm-audit-clearmeasurelabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: npm-audit
Source: https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders/tree/main/.claude/skills/npm-audit
Command: npx skills add https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders --skill npm-audit-clearmeasurelabs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires node, and includes scripts (resource) components.

What problem does it solve?

This skill automates the identification of security vulnerabilities in npm dependencies, ensuring that projects remain secure by flagging high and critical risks before they reach production.

Core Features & Use Cases

  • Automated Vulnerability Scanning: Scans entire codebases for package.json files and runs npm audit to detect security flaws.
  • Aggregate Reporting: Generates comprehensive JSON and Markdown reports detailing vulnerable packages, severity levels, and remediation paths.
  • Use Case: Use this skill during a CI/CD pipeline or before a pull request to automatically gate builds based on dependency security, ensuring no high-severity vulnerabilities are introduced.

Quick Start

Run the npm-audit skill to scan the current directory for vulnerable dependencies and generate a security report.

Frequently Asked Questions about npm-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate npm security vulnerability scanning for dependencies?▼

Automate npm security vulnerability scanning by running this skill to locate package.json files and execute dependency audits. It identifies high and critical vulnerabilities before production and outputs aggregated PASS/FAIL status reports.

Can I use npm audit to gate builds in a CI/CD pipeline?▼

Yes, you can gate builds in a CI/CD pipeline by running automated dependency audits before a pull request. This skill flags vulnerabilities based on configurable severity thresholds to prevent insecure code from merging.

Does automated npm dependency auditing work with monorepo structures?▼

Yes, automated npm dependency auditing supports multi-project monorepo structures. The skill scans the entire codebase for package.json files and provides aggregated security metrics across all sub-projects.

Do I need Node.js to run automated security audits for npm projects?▼

You need Node.js or Docker to run automated security audits for npm projects. This environment executes the audit engine and generates standardized security metrics for your dependencies.

What format do npm audit reports use for vulnerable packages?▼

npm audit reports use JSON and Markdown formats to detail vulnerable packages, severity levels, and remediation paths. These comprehensive reports help developers quickly resolve identified dependency security flaws.

Related Skills

Explore More Software Engineering Skills→
erclxerclx
2

setup-verify

Execute package.json scripts sequentially to validate project configuration.

Community
Intermediate
SjdjdiejdrirhdkjejSjdjdiejdrirhdkjej

optimization-phase

Run post-implementation quality gates and generate reports before release.

Community
Advanced
uphiagouphiago
1.1k

hunt-cicd

Detect critical CI/CD pipeline vulnerabilities across GitHub Actions, GitLab CI, Jenkins, and Terraform.

Community
Advanced
ToanPV90ToanPV90

sast-scanning

Detects source code vulnerabilities via static analysis with JSON/SARIF outputs.

Community
Advanced