القائمة
Identifying vulnerabilities in Node.js dependencies using the npm audit tool to filter for high and critical severities.
يُحدَّد Prompt الذي يراجع المصدر أولًا بشكل افتراضي. يمكنك التبديل إلى أمر مباشر أو تنزيل نسخة محلية.
اقرأ SKILL.md وأي ملفات مرافقة يعرضها SkillsMP قبل أن تقرر التثبيت.
استنادا إلى تصنيف SOC المهني
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/cxcscmu/SkillLearnBench --skill npm-audit-security-analysisيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
عرض SKILL.md
Handles reading, populating, and saving .docx files using the python-docx library. Use this skill for any tasks involving template filling or modifying Word documents.
Perform various data analysis on SEC 13-F and obtain some insights of fund activities such as number of holdings, AUM, and change of holdings between two quarters.
This skill includes search capability in 13F, such as fuzzy search a fund information using possibly inaccurate name, or fuzzy search a stock cusip info using its name.
| name | npm-audit-security-analysis |
| description | Identifying vulnerabilities in Node.js dependencies using the npm audit tool to filter for high and critical severities. |
npm audit is a built-in tool in the Node.js ecosystem that checks projects for known vulnerabilities in dependencies. It compares the versions listed in package-lock.json against the GitHub Advisory Database.
To perform a security audit and obtain detailed information in a machine-readable format, use the following flags:
npm audit --json
Provides a detailed JSON report containing dependency paths, CVE IDs, CVSS scores, and fix versions.npm audit can filter exit codes by severity, the full JSON output contains all levels. You must post-process the JSON to filter for high and critical severities as requested.The JSON output typically contains:
vulnerabilities: A map of package names to vulnerability details.via: Sources of the vulnerability (e.g., specific advisories).effects: Other packages affected by this dependency.range: The semver range of affected versions.fixAvailable: Information on whether a fix exists and what version resolves it.