Dependencies Audit

This one actually fixes your dependencies instead of just yelling at you about them. It runs through your package.json hunting for outdated packages, known CVEs, deprecated libraries, and sketchy licenses, then updates what it can and tells you how to fix the rest. Built specifically for Flows apps, so it generates the review-packages.md artifact their review process expects. The health scoring is practical: it flags packages under 10k weekly downloads, anything not updated in two years, or dependencies with known vulnerabilities as failures you need to address. It even checks for supply chain risks like suspicious install scripts and walks you through replacing bad dependencies with maintained alternatives.

skills.sh installs: 1.9K
GitHub stars: 6
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add cognitedata/builder-skills --skill dependencies-audit --agent claude-code

Installs into .claude/skills of the current project.

Files

Dependencies Fix

Find and fix all dependency issues in $ARGUMENTS (or the root package.json if no argument is given) — vulnerabilities, outdated packages, deprecated dependencies, license problems, and supply-chain risks. This skill produces the review-packages.md artifact required by the Flows app review process.

Step 1 — Read and list all dependencies

# List all dependencies and devDependencies
node -e "
  const pkg = require('./package.json');
  console.log('=== Dependencies ===');
  Object.entries(pkg.dependencies || {}).forEach(([name, ver]) => console.log(name + ' @ ' + ver));
  console.log('\\n=== Dev Dependencies ===');
  Object.entries(pkg.devDependencies || {}).forEach(([name, ver]) => console.log(name + ' @ ' + ver));
"

Record the total count of dependencies and devDependencies.