// Audit project dependencies for known vulnerabilities, outdated packages, and license compliance issues. Use when the user asks to check dependencies, audit packages, review licenses, or assess supply chain security.
Maintain project health by enforcing PR checklists, tracking open issues, verifying release readiness, and ensuring framework phases are up to date. Use when reviewing PRs, creating issues, preparing releases, or auditing project state.
Scaffold new Agent Skills with best-practice structure and frontmatter. Use when the user wants to create a new skill, bootstrap a skill directory, or generate SKILL.md boilerplate following the Agent Skills spec.
Validate CSV and JSON data files against schemas and quality rules. Use when the user asks to check data quality, validate a dataset, or verify file contents match an expected schema.
Generate friendly greeting messages in multiple languages. Use when the user asks for a hello message, welcome text, or localized greeting.
Maintain project release notes, changelogs, and framework phase updates. Use when the user asks to generate a changelog, draft release notes, update CHANGELOG.md, or track framework phase transitions.
Generate test file stubs and boilerplate from source code analysis. Use when the user asks to create tests, add test coverage, or scaffold test files for existing source code.
| name | dependency-audit |
| description | Audit project dependencies for known vulnerabilities, outdated packages, and license compliance issues. Use when the user asks to check dependencies, audit packages, review licenses, or assess supply chain security. |
| license | Apache-2.0 |
| compatibility | Requires Node.js 22+ |
| metadata | {"author":"skillscraft","version":"1.0","category":"security"} |
| allowed-tools | Bash Read |
Activate when the user wants to:
node scripts/audit-packages.mjs <project-directory>
node scripts/check-licenses.mjs <project-directory>
The audit script outputs:
{
"project": "./my-app",
"packageManager": "npm",
"totalDependencies": 42,
"issues": [
{
"package": "lodash",
"version": "4.17.15",
"issue": "outdated",
"severity": "medium",
"message": "Current: 4.17.15, no repository field in package.json"
}
],
"summary": { "critical": 0, "high": 0, "medium": 1, "low": 2 }
}
package-lock.json, yarn.lock, or pnpm-lock.yaml)node_modules/ — run npm install first if modules are missing