메뉴
Audit npm or pip dependencies for outdated packages and known vulnerabilities. Use when checking package health, preparing for a release, reviewing dependencies before merging a PR, or when asked about outdated packages or security advisories.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Explains code in plain language for someone unfamiliar with the programming language. Use when asked to explain code, walk through logic, describe what a function does, or when the user says "explain this" or "walk me through this".
Summarizes uncommitted git changes in a concise machine-readable format. Use in CI pipelines, scripts, or headless invocations where the output will be piped or captured.
Explains what a skill is and demonstrates that skills are working. Use when testing skills, when asked about skills, or when asked to demonstrate how skills work.
Demonstrates the personal scope for Claude Code skills. Use when testing personal-scoped skills or when the user wants to understand the difference between personal and project skill scopes.
Lists the conventions for this project and demonstrates the project scope for Claude Code skills. Use when asked about project conventions, code style, or as a demonstration of project-scoped skills.
Draft a CHANGELOG.md entry for the current changes in Keep a Changelog format. Use when releasing, tagging a version, or updating CHANGELOG.md.
| title | dependency-audit |
| name | dependency-audit |
| description | Audit npm or pip dependencies for outdated packages and known vulnerabilities. Use when checking package health, preparing for a release, reviewing dependencies before merging a PR, or when asked about outdated packages or security advisories. |
| when_to_use | Also use when the user mentions CVEs, npm audit output, pip check, dependency rot, or wants to know if it is safe to upgrade a specific package. |
| argument-hint | ["package-name or \"all\""] |
| allowed-tools | Bash(npm outdated) Bash(npm audit) Bash(npm list *) Bash(pip list *) Bash(pip-audit) Bash(pip show *) Read |
Run a dependency health check for the current project. If a specific package name was provided as an argument, focus the audit on that package. Otherwise audit all dependencies.
Check whether this is a Node.js or Python project:
package.json exists in the working directory, use npm.requirements.txt, pyproject.toml, or setup.py exists, use pip.For npm:
npm outdated
For pip:
pip list --outdated
If $ARGUMENTS is a specific package name, filter the output to that package. If $ARGUMENTS is empty or "all", show the full list.
For npm:
npm audit
For pip (if pip-audit is available):
pip-audit
If pip-audit is not installed, note its absence and recommend installing it: pip install pip-audit.
Present a concise report:
$ARGUMENTS names a specific package: show its current version, latest version, changelog link if available from npm info <package> homepage or pip show <package>, and whether any known vulnerabilities affect this specific packagepackage.json, requirements.txt, or any lock file. This skill audits only; it does not upgrade.