Dependency Audit

Scan every dependency manifest in the current project for:

1. Known security vulnerabilities — CVE / advisory database hits reported by the ecosystem's native audit tool.
2. Outdated versions — packages where a newer stable release exists.

Produce a single, prioritised, read-only report. Never modify package.json, Cargo.toml, lock files, or any other project file.

This skill is read-only. It reports findings. It does not install, upgrade, or patch anything.

Task Tracking

Before doing any work, call TaskCreate for each phase below. Call TaskUpdate (status in_progress) when you begin a phase and TaskUpdate (status completed) when you finish it.