Dependency Audit

This skill guides the AI in identifying and remediating vulnerabilities introduced through third-party dependencies, libraries, and build tools. This directly addresses A03:2025 – Software Supply Chain Failures.

Usage

Use this skill when you need to evaluate the security posture of your project's dependencies or CI/CD pipelines.

Example Triggers:

• "Can you audit my package.json and help me fix the vulnerable dependencies?"
• "Review my GitHub Actions workflow for supply chain risks."
• "How do I update the outdated logging package that has a CVE?"

Workflow