{"enrichment":{"faq":[{"a":"Dependency Audit scans your project's installed packages for known vulnerabilities, detects secrets about to be committed, and verifies lockfile integrity. Run it once to report findings, or wire it into CI as a merge gate that blocks risky dependencies from reaching production.","q":"What does Dependency Audit do?"},{"a":"Dependency Audit identifies and audits project dependencies for security vulnerabilities by scanning your codebase against known threat databases. It flags packages with CVEs, outdated versions, and compliance issues, then generates security reports you can review or integrate into your CI/CD pipeline.","q":"How do I check dependencies for vulnerabilities with Dependency Audit?"},{"a":"Yes. Dependency Audit detects outdated or deprecated packages in your codebase and reports their current versions alongside available updates. This helps you prioritize upgrades and maintain a healthy dependency tree.","q":"Can Dependency Audit find outdated packages?"},{"a":"Dependency Audit assesses dependency health and compliance status by evaluating package versions, lockfile integrity, and security posture. It provides a comprehensive view of your project's supply chain risk and helps you meet compliance requirements.","q":"Does Dependency Audit assess dependency health and compliance?"},{"a":"Yes. Dependency Audit can be wired into CI as a merge gate that blocks risky dependencies from reaching production. Run it once for ad-hoc reporting or integrate it continuously to enforce security standards across your development workflow.","q":"Can I use Dependency Audit in my CI/CD pipeline?"},{"a":"Dependency Audit monitors supply chain risks from third-party packages, including known vulnerabilities, deprecated libraries, and suspicious package behavior. It helps you identify and mitigate threats before they impact your application.","q":"What supply chain risks does Dependency Audit monitor?"}],"shadow_tags":["vulnerability-detection","package-management","security-scanning","dependency-tracking","risk-assessment","compliance-checking","version-control","supply-chain-security"],"summary_rewrite":"Dependency Audit scans your project's installed packages for known vulnerabilities, detects secrets about to be committed, and verifies lockfile integrity. Run it once to report findings, or wire it into CI as a merge gate that blocks risky dependencies from reaching production."},"gist":{"api_url":"https://skillfed.io/api/skills/shipshitdev/skills/dependency-audit.json","as_of":"2026-07-23","description":"Dependency Audit identifies CVEs in your dependencies and adds a CI gate to prevent vulnerable packages. npx skillfed install shipshitdev/skills/dependency-audit","install":{"manual":["git clone https://github.com/shipshitdev/skills","cp -r skills ~/.claude/skills/dependency-audit"],"primary":"npx skillfed install shipshitdev/skills/dependency-audit","version":"f8e5414d"},"kind":"skill","mirror_url":"https://skillfed.io/shipshitdev/skills/dependency-audit.md","similar":[{"id":"secondsky/sap-skills/sap-dependency-security","name":"Sap Dependency Security","publisher":"secondsky/sap-skills","url":"https://skillfed.io/secondsky/sap-skills/sap-dependency-security"},{"id":"secondsky/claude-skills/dependency-upgrade","name":"dependency-upgrade","publisher":"secondsky/claude-skills","url":"https://skillfed.io/secondsky/claude-skills/dependency-upgrade"},{"id":"secondsky/sap-skills/dependency-upgrade","name":"Dependency Upgrade","publisher":"secondsky/sap-skills","url":"https://skillfed.io/secondsky/sap-skills/dependency-upgrade"},{"id":"activepieces/activepieces/triage-dependabot-alerts","name":"Triage Dependabot Alerts","publisher":"activepieces/activepieces","url":"https://skillfed.io/activepieces/activepieces/triage-dependabot-alerts"}],"title":"Dependency Audit by shipshitdev \u2014 SkillFed","use":{"when":["Dependency Audit identifies and audits project dependencies for security vulnerabilities by scanning your codebase against known threat.","Yes."]},"what":{"lead":"Dependency Audit identifies CVEs in your dependencies and adds a CI gate to prevent vulnerable packages from merging.","rest":"Dependency Audit scans your project's installed packages for known vulnerabilities, detects secrets about to be committed, and verifies lockfile integrity. Run it once to report findings, or wire it into CI as a merge gate that blocks risky dependencies from reaching production."}},"id":"shipshitdev/skills/dependency-audit","install":{"mode":"external","repo":"https://github.com/shipshitdev/skills"},"links":{"html":"https://skillfed.io/shipshitdev/skills/dependency-audit","md":"https://skillfed.io/shipshitdev/skills/dependency-audit.md","repo":"https://github.com/shipshitdev/skills"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":3,"language":"Python","last_updated":"2026-07-23","license":null,"name":"Dependency Audit","publisher":"shipshitdev","stars":31},"relations":{"similar":[{"id":"shipshitdev/skills/github-actions-author"},{"id":"secondsky/sap-skills/sap-dependency-security"},{"id":"secondsky/claude-skills/dependency-upgrade"},{"id":"secondsky/sap-skills/dependency-upgrade"},{"id":"activepieces/activepieces/triage-dependabot-alerts"},{"id":"activepieces/activepieces/triage-image-cves"},{"id":"connorads/dotfiles/supply-chain-hardening"},{"id":"shipshitdev/skills/fix-merge-conflicts"},{"id":"modu-ai/moai-adk/moai-ref-supply-chain"},{"id":"shipshitdev/skills/stack-modernization"}]},"slug":{"owner":"shipshitdev","repo":"skills","skill":"dependency-audit"},"version":"f8e5414d"}