dependency-audit
Automatically scan your project to detect and eliminate unused dependencies, cutting down bloat and simplifying maintenance workflows. This skill integrates with Claude's multi-agent ecosystem to provide intelligent dependency analysis across Python, TypeScript, JavaScript, and other modern tech stacks.
dependency-audit scans your codebase to identify unused packages, security vulnerabilities, and outdated libraries across Python, TypeScript, JavaScript, and other modern tech stacks. The skill automatically analyzes your dependency tree and provides actionable recommendations to eliminate bloat and simplify maintenance workflows.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-18
dependency-audit scans your codebase to identify unused packages, security vulnerabilities, and outdated libraries across Python, TypeScript, JavaScript, and other modern tech stacks. The skill automatically analyzes your dependency tree and provides actionable recommendations to eliminate bloat and simplify maintenance workflows.
Use it when
- dependency-audit detects unused dependencies by analyzing your project's import statements and package declarations.
- dependency-audit scans your project for known security vulnerabilities and CVEs in your dependencies.
Verify before relying
Read SKILL.md below before installing (3 files). Open directory: indexed for reading, not audited.
Install
bobmatnyc/claude-mpm-skills/dependency-audit · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I audit dependencies in my project?
dependency-audit scans your codebase to identify unused packages, security vulnerabilities, and outdated libraries across Python, TypeScript, JavaScript, and other modern tech stacks. The skill automatically analyzes your dependency tree and provides actionable recommendations to eliminate bloat and simplify maintenance workflows.
How can I find unused npm packages in my JavaScript project?
dependency-audit detects unused dependencies by analyzing your project's import statements and package declarations. The skill identifies packages that are installed but never referenced in your code, allowing you to remove them and reduce bundle size without breaking functionality.
What does dependency-audit do for npm security vulnerability scanning?
dependency-audit scans your project for known security vulnerabilities and CVEs in your dependencies, then provides guidance on patching and updating affected packages. The skill helps you maintain a secure supply chain by identifying risky packages and suggesting safer alternatives or updated versions.
How can I update outdated dependencies safely with dependency-audit?
dependency-audit analyzes your outdated packages and recommends update strategies that maintain stability while avoiding breaking changes. The skill integrates with Claude's multi-agent ecosystem to help you plan major version migrations, test compatibility, and roll out updates systematically.
Can dependency-audit help me check for deprecated packages?
Yes, dependency-audit identifies deprecated or unmaintained libraries in your project and recommends modern replacements. The skill helps you migrate away from end-of-life packages by suggesting compatible alternatives and providing migration guidance to keep your tech stack current and supported.
How do I establish automated dependency maintenance workflows?
dependency-audit enables you to set up automated security and dependency maintenance processes by integrating with tools like GitHub Actions and CI/CD pipelines. The skill helps you configure regular scans, vulnerability patching, and dependency update workflows to reduce manual overhead and keep your project healthy.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
Dependency Audit Skill
Summary
Systematic workflow for auditing, updating, and cleaning up project dependencies. Covers security vulnerability scanning, outdated package detection, unused dependency removal, and migration from deprecated libraries.
When to Use
- Weekly/monthly dependency maintenance
- After security advisories (CVE announcements)
- Before major releases
- When bundle size increases unexpectedly
- During code reviews for dependency changes
- Onboarding to legacy projects
Quick Audit Process
1. Check Outdated Packages
```bash
npm
npm outdated
pnpm
pnpm outdated
yarn
yarn
(truncated - see the full file via the links below)
File tree — 3 files
toolchains/universal/dependency/dependency-audit/SKILL.md
toolchains/universal/dependency/dependency-audit/metadata.json
toolchains/universal/dependency/dependency-audit/references/open-source-safety.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Identify and remove unused dependencies to reduce bundle size and maintenance burden”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
npm-helper simplifies package installation and dependency management for your development workflow. Quickly resolve version conflicts, update packages, and maintain clean project dependencies without manual configuration hassles.
dependency-updater automates the process of keeping your project dependencies current while maintaining stability and security. This skill integrates with AI coding agents to intelligently manage updates, applying protective measures to prevent breaking changes and ensure your codebase remains compatible.
This skill automates the process of updating your project's dependencies while maintaining stability and compatibility. It handles multiple programming languages and frameworks, reducing the manual work required to keep packages current and secure.
This skill helps you systematically review and remediate security vulnerabilities within your project's dependency tree. It integrates with Claude Code to scan for known issues, assess their impact, and recommend or apply fixes automatically.
This skill automates dependency management across multiple package ecosystems, helping you keep npm, pip, cargo, and maven packages current while minimizing breaking changes. It integrates with AI agents to analyze version compatibility, flag security updates, and execute safe upgrades across your entire development stack.
Dependency Audit scans your project's installed packages for known vulnerabilities, detects secrets about to be committed, and verifies lockfile integrity. Run it once to report findings, or wire it into CI as a merge gate that blocks risky dependencies from reaching production.