npm-audit

Audit npm dependencies for known vulnerabilities and output JSON reports.

1|1|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/dennisonbertram/go-agent-harness --skill npm-audit-dennisonbertram
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: npm-audit
Source: https://github.com/dennisonbertram/go-agent-harness/tree/main/skills/npm-audit
Command: npx skills add https://github.com/dennisonbertram/go-agent-harness --skill npm-audit-dennisonbertram

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit npm dependencies for known vulnerabilities and provide actionable remediation guidance.

Core Features & Use Cases

  • Run full npm audit to detect vulnerabilities in direct and transitive dependencies.
  • JSON output for programmatic parsing and integration into CI/CD.
  • Guidance and remediation paths, including automatic fixes with npm audit fix and severity-based filtering.

Quick Start

Run npm audit to scan dependencies and review the JSON output for automated parsing.

Frequently Asked Questions about npm-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit npm dependencies for known vulnerabilities?

To audit npm dependencies for vulnerabilities, run a full npm audit scan to detect security issues in both direct and transitive dependencies, then review the structured results for actionable remediation guidance.

Can I get JSON output from npm audit for CI/CD integration?

Yes, npm audit supports JSON output format, enabling programmatic parsing and seamless integration into CI/CD pipelines for automated vulnerability detection and severity-filtered reporting.

How do I automatically fix npm package vulnerabilities?

You can automatically fix npm package vulnerabilities by running npm audit fix, which updates vulnerable dependencies to safe versions and provides remediation paths for remaining issues.

Does npm audit work with frontend projects using npm?

Yes, npm audit applies to both Node.js and frontend projects using npm, scanning all project dependencies for known vulnerabilities and providing structured results suitable for programmatic consumption.

What is severity-based filtering in npm vulnerability audits?

Severity-based filtering in npm vulnerability audits allows you to categorize and report vulnerabilities by severity level, enabling focused remediation efforts on critical security issues within your dependency tree.

Can npm audit detect vulnerabilities in transitive dependencies?

Yes, npm audit runs a full scan to detect vulnerabilities in both direct and transitive dependencies, providing comprehensive coverage of your entire dependency tree with actionable remediation guidance.