dependency-audit
Audit project dependencies for risky additions or upgrades. Use when reviewing dependency changes or lockfile diffs.
Source facts
- Repository
- CognitionAI/plugin-template
- Last source activity
- July 27, 2026 at 00:23
- Detected SKILL.md language
- English
- Stars
- 2
- Forks
- 2
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Showing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- dependency-audit
- description
- Audit project dependencies for risky additions or upgrades. Use when reviewing dependency changes or lockfile diffs.
# Dependency audit
## Steps
1. Diff the dependency manifests and lockfiles in the change set.
2. For each added or upgraded package, check:
- Publish date of the pinned version (prefer versions published ≥7 days ago).
- Version range style — flag floating ranges (`latest`, `*`, unbounded `>=`).
- Maintainer and repository reputation for unfamiliar packages.
3. Flag any package that pulls in install scripts or native build steps.
4. Summarize findings with a clear recommendation per package.
View on GitHub