Scan JavaScript and TypeScript projects for direct and transitive dependency vulnerabilities.
npx skills add https://github.com/llbbl/upkeep --skill upkeep-audit
Please help me install this Agent Skill. Skill: upkeep-audit Source: https://github.com/llbbl/upkeep/tree/main/skills/upkeep-audit Command: npx skills add https://github.com/llbbl/upkeep --skill upkeep-audit
Security auditing of JavaScript and TypeScript projects to identify and prioritize vulnerabilities, enabling safe, informed remediation.
Run the security audit to enumerate vulnerabilities, review findings by severity, and begin fixes in a controlled workflow.
High-intent search queries and answers about installing and using this skill.
To audit JavaScript dependencies for security vulnerabilities, run an automated scan across your project to enumerate direct and transitive issues, then review findings grouped by severity for risk assessment. This includes support for npm, yarn, pnpm, and bun package managers.
The best way to remediate npm vulnerabilities safely is using a guided workflow that includes branching, PR creation, and post-fix verification. This ensures vulnerabilities are resolved through controlled updates and a re-audit confirms the fixes.
Yes, you can scan transitive vulnerabilities in TypeScript projects. The audit catalogs security issues across varying project sizes and dependency trees, capturing both direct and transitive vulnerabilities with emphasis on risk assessment.
Severity-based grouping helps with vulnerability risk assessment by prioritizing security issues based on their severity level. This allows you to address the highest-risk vulnerabilities first and make informed decisions about safe remediation steps.
Yes, the security audit works with yarn, pnpm, and bun package managers, alongside npm. It scopes and audits vulnerabilities across multiple package managers to identify and catalog security issues in JavaScript and TypeScript projects.
You should run a re-audit after fixing security vulnerabilities to verify that the issues are fully resolved. Post-fix verification ensures your remediation steps successfully eliminated the direct and transitive vulnerabilities without introducing new risks.
jayteealaoDetect project type and generate structured release configurations.
ibalasiteMerge pull requests, wait for CI, and verify production health via canary checks.
IndustrialAnalyze code for security vulnerabilities and performance issues.
YukiIto1999Scan source code with Semgrep, CodeQL, and Bandit to detect vulnerabilities and secrets.
