dependency-audit

What this skill does

Automatically detects the project type (Node.js, Python, Go, container) and runs the appropriate audit tool (npm audit, pip-audit, trivy). Aggregates discovered vulnerabilities by severity and outputs recommendations including fixed versions.

When to use

• When checking dependency vulnerabilities before a code review or deployment
• When setting up an automated dependency security gate in a CI/CD pipeline
• When auditing accumulated vulnerabilities in an aging project all at once
• When scanning container images or filesystems for vulnerabilities

Prerequisites