security-check

Scan project dependencies for known security vulnerabilities and generate fix recommendations.

33|5|Updated Jan 2, 2026

Search Tags:#security #vulnerability #npm #pip #dependencies #audit #cve

Ready to run

npx skills add https://github.com/y1feng200156/ham-study --skill security-check-y1feng200156

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/y1feng200156/ham-study/tree/main/.agent/skills/security-check
Command: npx skills add https://github.com/y1feng200156/ham-study --skill security-check-y1feng200156

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps mitigate security risks within your project's dependencies, preventing potential breaches and ensuring a more secure software supply chain.

Core Features & Use Cases

Vulnerability Detection: Scans direct and transitive dependencies against comprehensive CVE databases.
Severity Assessment: Provides CVSS scores to prioritize critical vulnerabilities.
Fix Recommendations: Offers guidance on secure versions or workarounds.
Use Case: Before deploying your web application, run this Skill to ensure no outdated or vulnerable packages are included, preventing known exploits from compromising your production environment.

Quick Start

Run a security check on the project's dependencies.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan project dependencies for known vulnerabilities?▼

You can scan project dependencies for vulnerabilities across Python, JavaScript, Java, .NET, Ruby, and Go by checking them against comprehensive CVE databases to identify direct and transitive security risks.

Can I automate dependency security audits in a CI/CD pipeline?▼

Yes, you can automate dependency security audits by integrating this Skill directly into CI/CD pipelines, enabling continuous scanning of packages for CVEs and severity scoring before deployment.

Does dependency vulnerability scanning work with both npm and pip packages?▼

Dependency vulnerability scanning works with both npm and pip packages, alongside Java, .NET, Ruby, and Go package managers, providing CVSS severity scores and fix recommendations for detected CVEs.

What is the best way to prioritize security vulnerabilities found in software dependencies?▼

The best way to prioritize security vulnerabilities is to assess them using CVSS severity scores provided by the scan, allowing you to address critical risks in your dependencies first.

How do I get fix recommendations for outdated and vulnerable packages?▼

To get fix recommendations for vulnerable packages, run a security check that identifies CVEs in your dependencies and offers guidance on secure versions or workarounds to mitigate risks.