Menu
Step-by-step workflow to fix npm/pnpm/yarn vulnerabilities and review Dependabot PRs with semver and CI safety.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Generate a mock API server from OpenAPI specs, TypeScript interfaces, or endpoint descriptions for frontend development and testing. Use when the user asks to create a mock server, fake API, or stub endpoints.
Map and visualize module dependencies, detect circular imports, and identify coupling hotspots. Use when the user asks to analyze dependencies, find circular imports, or understand module relationships.
Generate typed error classes, error handling middleware, and HTTP error mapping following project conventions. Use when the user asks to set up error handling, create error classes, or implement error middleware.
Create, manage, and clean up feature flags for gradual rollouts and safe deployments. Use when the user asks to add a feature flag, toggle, or manage feature gating.
Generate docker-compose.yml files for local development with application services, databases, caches, and queues. Use when the user asks to set up a local dev environment or create docker-compose configuration.
Generate OpenSearch Dashboards (Kibana) saved objects — index patterns, visualizations, and dashboards as JSON. Use when the user asks to create dashboards, charts, or visualizations for OpenSearch/Elasticsearch/Kibana.
| name | dependency-remediation |
| description | Step-by-step workflow to fix npm/pnpm/yarn vulnerabilities and review Dependabot PRs with semver and CI safety. |
npm audit, GitHub Dependabot, Snyk, or similarpackage-lock.json, pnpm-lock.yaml, or yarn.lock)Run /audit-deps or npm audit and save severity counts (critical/high/medium/low).
npm audit fix (non-breaking) or pnpm audit --fix / yarn equivalent.{{CONFIG.testing.typeCheckCommand}} and targeted tests — not necessarily full suite unless user confirms.postinstall scripts from new transitive deps--force without listing each major and risk.If no patched version exists: document, track issue, consider pinning or removing the dependency.
/fix-vulnerable-deps/audit-deps