菜单
Audit dependencies for vulnerabilities, license issues, and outdated packages. Invoke for: "dependency audit", "npm audit", "pip audit", "outdated packages", "CVE check", "license compliance", "supply chain security", "vulnerable dependency", "update packages".
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Accessibility audit against WCAG 2.1 AA standards. Invoke for: "accessibility", "a11y", "WCAG", "screen reader", "aria labels", "color contrast", "keyboard navigation", "accessibility audit", "ADA compliance".
Write Architecture Decision Records (ADRs) to document significant technical decisions. Invoke for: "write ADR", "document this decision", "architecture decision record", "why did we choose X", "decision log", "record this choice", "ADR for".
Design and implement multi-agent orchestration systems. Invoke for: "multi-agent system", "orchestrate agents", "agent pipeline", "agent workflow", "how should agents communicate", "agent coordination", "task delegation to agents", "build an agent system".
AI safety review: alignment, misuse prevention, bias, fairness, and responsible AI. Invoke for: "AI safety review", "bias check", "fairness audit", "alignment", "responsible AI", "misuse prevention", "AI ethics", "safety guardrails", "could this AI system be misused".
LLM and AI agent security: prompt injection, jailbreaks, agent defense, guardrails. Invoke for: "prompt injection", "LLM security", "agent security", "jailbreak defense", "AI safety audit", "system prompt leakage", "adversarial inputs", "AI pipeline security", "tool call validation", "LLM guardrails", "model security", "is my prompt safe".
Improve algorithmic efficiency — find better algorithms and data structures. Invoke for: "algorithm improvement", "better algorithm", "O(n²) is too slow", "data structure choice", "optimize this loop", "algorithmic complexity", "time complexity".
| name | dep-auditor |
| description | Audit dependencies for vulnerabilities, license issues, and outdated packages. Invoke for: "dependency audit", "npm audit", "pip audit", "outdated packages", "CVE check", "license compliance", "supply chain security", "vulnerable dependency", "update packages". |
| argument-hint | requirements.txt, package.json, or project path |
| allowed-tools | Read, Grep, Glob, Bash, WebSearch |
Category: Development
Audit all project dependencies for known CVEs, license compliance issues, and outdated versions.
## Dependency Audit — <date>
### Critical CVEs (patch immediately)
- package@x.x.x — CVE-XXXX-XXXX — upgrade to x.x.x
### Outdated (upgrade soon)
### License Issues
### Recommendations
/dep-auditor requirements.txt — check for CVEs and outdated packages