skills.rest
charlesjones-dev
charlesjones-devCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-dependency-scanning

Scan deployed websites for outdated dependencies, CVEs, and security misconfigurations.

34|3|Updated Oct 17, 2025
Search Tags:#vulnerability#frontend#CVE#dependency scan#web security#CMS#HTTP headers
One-click install
npx skills add https://github.com/charlesjones-dev/claude-code-plugins-dev --skill security-dependency-scanning
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-dependency-scanning
Source: https://github.com/charlesjones-dev/claude-code-plugins-dev/tree/main/plugins/ai-security/skills/security-dependency-scanning
Command: npx skills add https://github.com/charlesjones-dev/claude-code-plugins-dev --skill security-dependency-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automatically identifies outdated libraries, known vulnerabilities (CVEs), and insecure configurations in deployed websites, preventing manual, time-consuming checks and mitigating supply chain risks.

Core Features & Use Cases

  • Dependency Detection: Identifies frontend libraries, frameworks, and CMS platforms with their versions from live websites.
  • CVE Identification: Cross-references detected versions with known vulnerabilities and CVSS scores for immediate risk assessment.
  • Security Header Audit: Checks for critical HTTP security headers like Content-Security-Policy (CSP), HSTS, and X-Frame-Options.
  • Use Case: Scan your live website to detect if any JavaScript libraries have known CVEs and generate a prioritized report with upgrade recommendations, all without manual effort, ensuring your site uses secure, up-to-date components.

Quick Start

Use the security-dependency-scanning skill to audit the website 'https://example.com' for outdated libraries and missing security headers.

Frequently Asked Questions about security-dependency-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a website for outdated dependencies and known vulnerabilities?▼

Scanning a website for outdated dependencies involves analyzing live sites to detect frontend libraries, CMS versions, and third-party integrations, then cross-referencing detected versions against CVE databases to identify known vulnerabilities with CVSS scores and generate a prioritized upgrade report.

Can I detect CVEs in JavaScript libraries without manually checking each one?▼

Yes. The Skill automatically extracts JavaScript library versions from script tags and CDN URLs, cross-references them against known vulnerabilities, and produces a comprehensive report with CVE identifiers and risk assessments without manual effort.

What security headers should I check on my website?▼

Critical HTTP security headers include Content-Security-Policy (CSP), HSTS, and X-Frame-Options. The Skill audits your live website to detect which headers are present or missing, helping you identify insecure configurations that expose your site to attack.

How can I identify which CMS version is running on a website?▼

The Skill detects CMS versions by analyzing deployed sites through HTTP headers, script tags, and response fingerprints, enabling you to assess CMS-specific vulnerabilities and support security assessments or pre-acquisition due diligence.

Can I use this for security assessments and due diligence checks?▼

Yes. The Skill supports security assessments, pre-acquisition due diligence, and client engagements by providing comprehensive vulnerability reports that identify supply chain risks, outdated components, and security misconfigurations across frontend, CMS, and third-party integrations.

What data does the Skill extract from a website to identify vulnerabilities?▼

The Skill extracts raw HTTP headers via WebFetch or curl, detects dependency versions from script tags and CDN URLs, identifies CMS versions, and analyzes third-party integrations to produce a complete vulnerability report with upgrade recommendations.

Related Skills

Explore More Software Engineering Skills→
zongtingweizongtingwei
25

pdb

Downloads PDB/mmCIF protein files and extracts chains or domains for downstream design workflows.

Community
Intermediate
randalmurphalrandalmurphal

Vulnerability Triage & Prioritization

Compute CVSS scores and prioritize vulnerabilities with weighted ranking.

Community
Basic
7a336e6e7a336e6e
1

auditing-dependencies

Analyze third-party libraries for vulnerabilities and supply chain risks.

Community
Intermediate
igbuendigbuend
8

osv-scanner

Scan project dependencies for known vulnerabilities using Google OSV-Scanner.

Community
Intermediate