Menú
Audits dependency files and package changes for vulnerable packages, risky upgrades, license concerns, and supply-chain exposure.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Creates or reviews API documentation for endpoints, SDKs, schemas, examples, errors, authentication, and compatibility behavior.
Diagnoses CI/CD failures from logs and workflow files, identifies likely root cause, and recommends minimal fixes or retry guidance.
Reviews code changes for quality, correctness, style, and potential issues.
Audits dependency files and package changes for vulnerable packages, risky upgrades, license concerns, and supply-chain exposure.
Reviews Dockerfiles and container configuration for security, reproducibility, image size, runtime permissions, and deployment reliability.
Plans safe framework, library, API, database, or architecture migrations with phased rollout, compatibility checks, and rollback strategy.
| name | dependency-audit |
| display_name | Dependency Audit |
| description | Audits dependency files and package changes for vulnerable packages, risky upgrades, license concerns, and supply-chain exposure. |
| category | code-quality |
| version | 1.0.0 |
| tags | ["dependencies","supply-chain","security","licenses","maintenance"] |
| providers | ["claude-code","codex","copilot","openclaw","hermes-agent"] |
| author | agent-skills contributors |
Use this skill when reviewing changes to package manifests, lockfiles, container base images, GitHub Actions, language toolchains, or third-party SDKs.
package.json, lockfiles, pyproject.toml, requirements.txt, go.mod, Cargo.toml, Gemfile, Dockerfiles, or workflow YAMLProvide: