Individual skill
dependency-auditor
Scan project dependencies for vulnerabilities, license issues, and upgrade opportunities across Python, Node.js, Go, and Rust. Use when auditing dependencies, checking licenses, planning upgrades, or assessing supply chain security.
engineering/dependency-auditor/SKILL.md
Source commit 25bf86b89c6c1e63f433a5b65e8cfcb6cf0b7ad3
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 10, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,095
- Repository last updated
- Nov 8, 2026
- License
- NOASSERTION
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-agents Repository topic
- ai-skills Repository topic
- claude-code Repository topic
- developer-tools Repository topic
- agentic-coding Repository topic
- cursor Repository topic
- github-copilot Repository topic
- compliance-automation Repository topic
- claude-skills Repository topic
- gemini-cli Repository topic
- dependencies Declared skill tag
- vulnerabilities Declared skill tag
- licenses Declared skill tag
- supply-chain Declared skill tag
- upgrades Declared skill tag
- operations Derived category
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
README.mddoc · 15,660 bytesSKILL.mdcore · 9,069 bytesSKILL.mdcore · 9,069 bytesSKILL.mdcore · 9,069 bytesSKILL.mdcore · 9,069 bytesassets/sample_go.modasset · 2,108 bytesassets/sample_inventory.jsonasset · 967 bytesassets/sample_package.jsonasset · 1,919 bytesassets/sample_requirements.txtdoc · 1,107 bytesexpected_outputs/sample_license_report.txtdoc · 930 bytesexpected_outputs/sample_upgrade_plan.txtdoc · 2,061 bytesexpected_outputs/sample_vulnerability_report.jsonasset · 1,708 bytesreferences/capabilities-and-best-practices.mddoc · 10,894 bytesreferences/dependency_management_best_practices.mddoc · 18,189 bytesreferences/license_compatibility_matrix.mddoc · 8,860 bytesreferences/tools-integration-and-troubleshooting.mddoc · 8,604 bytesreferences/vulnerability_assessment_guide.mddoc · 14,453 bytesscripts/dep_scanner.pyruns · 32,911 bytesscripts/license_checker.pyruns · 46,739 bytesscripts/upgrade_planner.pyruns · 43,103 bytestest-project/package.jsonruns · 1,919 bytes
No licensed excerpt is available. You can inspect the pinned source.