skills

Audit dependency-management practices in repositories that use npm, pnpm, Yarn, Bun, uv, pip, or Poetry. Use when you need to review package installation hardening, lockfile integrity, deterministic installs, dependency update automation, `.env` secret handling, dev-container isolation, publishing controls, provenance or OIDC setup, or overall supply-chain hygiene.

Run a security audit".