Scans your project dependencies for known security vulnerabilities and outdated packages, then gives you a prioritized list of what needs attention. You'd run this before deployments or as part of CI to catch issues early, especially useful when you inherit a project or haven't updated dependencies in a while. It checks against vulnerability databases and flags breaking changes in major version bumps. The real value is in the risk assessment, it doesn't just dump CVE numbers but tells you which issues actually matter for your setup and what the upgrade path looks like.

skills.sh installs
711
GitHub stars
29.5K
last updated
Aug 21, 2026

Install

$ npx -y skills add alirezarezvani/claude-skills --skill dependency-auditor --agent claude-code

Installs into .claude/skills of the current project.

Files

Dependency Auditor

Skill Type: POWERFUL · Category: Engineering · Domain: Dependency Management & Security

Offline, deterministic dependency auditing across 8+ package ecosystems. The three scripts are pattern-matchers over manifests/lockfiles — they do not call live advisory APIs; pair their findings with npm audit / pip-audit / cargo audit for current CVE coverage.

Quick Start

# 1. Scan for vulnerabilities (built-in offline CVE pattern set; exit non-zero on high severity)
python3 scripts/dep_scanner.py /path/to/project --format json --fail-on-high -o scan.json

# 2. Check license compliance and conflicts
python3 scripts/license_checker.py /path/to/project --policy strict --format json -o licenses.json

# 3. Plan upgrades from the scanner's inventory
python3 scripts/upgrade_planner.py scan.json --risk-threshold medium --timeline 90 --format json -o plan.json

Sponsors

Details

Repository
github.com/alirezarezvani/claude-skills
Categories
Frontend Development, Git & Pull Requests, Code Review & Quality, Release Management, Productivity & Planning
First seen
Jun 3, 2026

More from alirezarezvani/claude-skills

All 267
1marswaveai avatarmusicmarswaveai/skillsGenerate, remix, extend, edit, and analyze AI music (Mureka). Triggers on: "音乐", "music", "生成音乐", "generate music", "翻唱", "cover", "混音", "remix", "续写", "extend"710skills.sh installs
2mohitmishra786 avatarcpu-cache-optmohitmishra786/low-level-dev-skillsCPU cache optimization skill for C/C++ and Rust. Use when diagnosing cache misses, improving data layout for cache efficiency, using perf stat cache counters, u709skills.sh installs
3mohitmishra786 avatarelf-inspectionmohitmishra786/low-level-dev-skillsELF binary inspection skill for Linux. Use when examining ELF executables or shared libraries with readelf, objdump, nm, or ldd to understand symbol visibility,702skills.sh installs
4patricio0312rev avatarpostman-collection-generatorpatricio0312rev/skillsGenerates Postman collection JSON files from Express, Next.js, Fastify, Hono, or other API routes. Scans route definitions, extracts endpoints, methods, params,699skills.sh installs
5ruvnet avatarbrowser-extractruvnet/rufloExtract structured data via stored browser-templates or one-shot DOM queries, with mandatory AIDefence PII + prompt-injection gates before content reaches the m698skills.sh installs
6ruvnet avatarbrowser-screenshot-diffruvnet/rufloVisual + DOM diff between two recorded sessions at matching trajectory step ids; used for visual regression and replay verification697skills.sh installs