skills.rest
y1feng200156
y1feng200156COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-check

Scan project dependencies for known security vulnerabilities and generate fix recommendations.

33|5|Updated Jan 2, 2026
Search Tags:#security#vulnerability#npm#pip#dependencies#audit#cve
One-click install
npx skills add https://github.com/y1feng200156/ham-study --skill security-check-y1feng200156
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-check
Source: https://github.com/y1feng200156/ham-study/tree/main/.agent/skills/security-check
Command: npx skills add https://github.com/y1feng200156/ham-study --skill security-check-y1feng200156

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps mitigate security risks within your project's dependencies, preventing potential breaches and ensuring a more secure software supply chain.

Core Features & Use Cases

  • Vulnerability Detection: Scans direct and transitive dependencies against comprehensive CVE databases.
  • Severity Assessment: Provides CVSS scores to prioritize critical vulnerabilities.
  • Fix Recommendations: Offers guidance on secure versions or workarounds.
  • Use Case: Before deploying your web application, run this Skill to ensure no outdated or vulnerable packages are included, preventing known exploits from compromising your production environment.

Quick Start

Run a security check on the project's dependencies.

Frequently Asked Questions about security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan project dependencies for known vulnerabilities?▼

You can scan project dependencies for vulnerabilities across Python, JavaScript, Java, .NET, Ruby, and Go by checking them against comprehensive CVE databases to identify direct and transitive security risks.

Can I automate dependency security audits in a CI/CD pipeline?▼

Yes, you can automate dependency security audits by integrating this Skill directly into CI/CD pipelines, enabling continuous scanning of packages for CVEs and severity scoring before deployment.

Does dependency vulnerability scanning work with both npm and pip packages?▼

Dependency vulnerability scanning works with both npm and pip packages, alongside Java, .NET, Ruby, and Go package managers, providing CVSS severity scores and fix recommendations for detected CVEs.

What is the best way to prioritize security vulnerabilities found in software dependencies?▼

The best way to prioritize security vulnerabilities is to assess them using CVSS severity scores provided by the scan, allowing you to address critical risks in your dependencies first.

How do I get fix recommendations for outdated and vulnerable packages?▼

To get fix recommendations for vulnerable packages, run a security check that identifies CVEs in your dependencies and offers guidance on secure versions or workarounds to mitigate risks.

Related Skills

Explore More Software Engineering Skills→
dhruvinrsonidhruvinrsoni

dependency-analysis

Analyze project dependencies by building graphs and detecting circular references.

Community
Advanced
ray-manalotoray-manaloto
1

mise-lockfile

Generate and manage mise lockfiles to pin tool versions and provenance.

Official
Advanced
LeoWSY-hashblueLeoWSY-hashblue
3

source-code-scanning

Scan source code for vulnerabilities, secrets, and dependency CVEs.

Community
Advanced
limit5limit5

SKILL_HD_CVE_IMPACT

Map CVE entries to affected components in a Software Bill of Materials.

Community
Intermediate