security-dependency-scanning

Scan deployed websites for outdated dependencies, CVEs, and security misconfigurations.

34|3|Updated Oct 17, 2025

Search Tags:#vulnerability #frontend #CVE #dependency scan #web security #CMS #HTTP headers

Ready to run

npx skills add https://github.com/charlesjones-dev/claude-code-plugins-dev --skill security-dependency-scanning

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-dependency-scanning
Source: https://github.com/charlesjones-dev/claude-code-plugins-dev/tree/main/plugins/ai-security/skills/security-dependency-scanning
Command: npx skills add https://github.com/charlesjones-dev/claude-code-plugins-dev --skill security-dependency-scanning

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automatically identifies outdated libraries, known vulnerabilities (CVEs), and insecure configurations in deployed websites, preventing manual, time-consuming checks and mitigating supply chain risks.

Core Features & Use Cases

Dependency Detection: Identifies frontend libraries, frameworks, and CMS platforms with their versions from live websites.
CVE Identification: Cross-references detected versions with known vulnerabilities and CVSS scores for immediate risk assessment.
Security Header Audit: Checks for critical HTTP security headers like Content-Security-Policy (CSP), HSTS, and X-Frame-Options.
Use Case: Scan your live website to detect if any JavaScript libraries have known CVEs and generate a prioritized report with upgrade recommendations, all without manual effort, ensuring your site uses secure, up-to-date components.

Quick Start

Use the security-dependency-scanning skill to audit the website 'https://example.com' for outdated libraries and missing security headers.

Frequently Asked Questions about security-dependency-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a website for outdated dependencies and known vulnerabilities?▼

Scanning a website for outdated dependencies involves analyzing live sites to detect frontend libraries, CMS versions, and third-party integrations, then cross-referencing detected versions against CVE databases to identify known vulnerabilities with CVSS scores and generate a prioritized upgrade report.

Can I detect CVEs in JavaScript libraries without manually checking each one?▼

Yes. The Skill automatically extracts JavaScript library versions from script tags and CDN URLs, cross-references them against known vulnerabilities, and produces a comprehensive report with CVE identifiers and risk assessments without manual effort.

What security headers should I check on my website?▼

Critical HTTP security headers include Content-Security-Policy (CSP), HSTS, and X-Frame-Options. The Skill audits your live website to detect which headers are present or missing, helping you identify insecure configurations that expose your site to attack.

How can I identify which CMS version is running on a website?▼

The Skill detects CMS versions by analyzing deployed sites through HTTP headers, script tags, and response fingerprints, enabling you to assess CMS-specific vulnerabilities and support security assessments or pre-acquisition due diligence.

Can I use this for security assessments and due diligence checks?▼

Yes. The Skill supports security assessments, pre-acquisition due diligence, and client engagements by providing comprehensive vulnerability reports that identify supply chain risks, outdated components, and security misconfigurations across frontend, CMS, and third-party integrations.

What data does the Skill extract from a website to identify vulnerabilities?▼

The Skill extracts raw HTTP headers via WebFetch or curl, detects dependency versions from script tags and CDN URLs, identifies CMS versions, and analyzes third-party integrations to produce a complete vulnerability report with upgrade recommendations.