Audit npm and Python dependencies and apply patch+minor updates.
npx skills add https://github.com/carlos18bp/gym_project --skill vuln-audit-carlos18bp
Please help me install this Agent Skill. Skill: vuln-audit Source: https://github.com/carlos18bp/gym_project/tree/main/.agents/skills/vuln-audit Command: npx skills add https://github.com/carlos18bp/gym_project --skill vuln-audit-carlos18bp
This skill removes the friction of manually auditing vulnerabilities and outdated dependencies by automating detection, safe patch+minor updates, and verification across the backend (Python) and frontend (npm) in the repo.
npm audit/npm outdated and scans Python dependencies with pip-audit/pip list --outdated.git-branch-protocol, avoids full test runs (uses pytest --collect-only plus a minimal slice), and produces a structured audit-report.md.Run the skill to audit both surfaces and apply patch+minor updates: vuln-audit (no argument).
High-intent search queries and answers about installing and using this skill.
A safe vulnerability audit scans both npm and Python dependencies, applies only patch and minor updates within the current major version, and verifies changes with a minimal build and test slice without forcing major upgrades.
Enforcing pin-respecting upgrades avoids forced major version bumps, ensuring existing constraints remain intact while applying patch and minor dependency updates to reduce security and build risk.
Yes, you can automate npm audit and pip-audit scans together for a full-stack repository by executing both package managers sequentially, detecting outdated dependencies, and generating a structured audit report.
Dependency auditing requires a clean git working tree before applying updates to enforce operational guardrails and branch protocol compliance, ensuring local commits are created safely without conflicting changes.
You should avoid full test runs when applying security patches to minimize execution time and risk, using instead a minimal verification approach like pytest collection and a small test slice to validate dependency updates.
Limitations of using patch and minor updates for security compliance include the inability to resolve vulnerabilities requiring major version upgrades, as the process strictly respects existing version pins and avoids forced major bumps.
MartinoPoloBump npm versions, push tags, and verify GitHub Actions runs.
SteveGJonesCreate pull requests after pre-push validation and test count verification.
BerryKuipersValidate commit messages, branch names, and repository state for Git hygiene.
lklimekScan Go, Rust, Python, and Node.js dependencies for known vulnerabilities.