package-audit

Name: package-audit
Availability: InStock
Author: sgcarstrends

Identify security vulnerabilities in npm dependencies using pnpm audit and Snyk.

21|2|Updated Nov 5, 2023

Search Tags:#dependencies #security-audit #snyk #cvEs #pnpm-audit

Ready to run

npx skills add https://github.com/sgcarstrends/sgcarstrends --skill package-audit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: package-audit
Source: https://github.com/sgcarstrends/sgcarstrends/tree/main/.claude/skills/package-audit
Command: npx skills add https://github.com/sgcarstrends/sgcarstrends --skill package-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill guides security and health audits using pnpm audit, Snyk, and automated tooling.

Core Features & Use Cases

Vulnerability scanning with pnpm audit and snyk.
Remediation guidance for CVEs and stale packages.
Pre-deployment checks to avoid risky dependencies.

Quick Start

Run a full audit and address high-severity issues.

Frequently Asked Questions about package-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit npm dependencies for security vulnerabilities?▼

Audit npm dependencies using pnpm audit or Snyk to identify security vulnerabilities and CVEs. This Skill integrates both tools to scan your project's dependency tree, generate structured reports (JSON/HTML), and provide remediation guidance for identified issues.

Can I automate security checks in my CI pipeline before deployment?▼

Yes, this Skill supports automated pre-deployment security checks in CI pipelines. It runs vulnerability scans, identifies high-severity CVEs, and outputs actionable reports to prevent risky dependencies from reaching production.

What's the best way to handle security vulnerabilities in a monorepo?▼

This Skill applies pnpm audit and Snyk across Node.js monorepos to identify vulnerabilities across all workspaces. It supports automated fixes and overrides, enabling consistent security remediation across your entire project structure.

Does this work with pnpm audit and Snyk together?▼

Yes, this Skill integrates with both pnpm audit and Snyk for comprehensive vulnerability scanning. It combines their capabilities to deliver detailed CVE detection, remediation guidance, and structured output for informed decision-making.

How do I get actionable remediation guidance for stale or vulnerable packages?▼

This Skill generates structured reports (JSON/HTML) that identify stale packages and vulnerable dependencies alongside specific remediation steps. Use these reports to prioritize fixes and understand the health impact of your dependency tree.