Dependency Audit

ProductivityIntermediate

Comprehensively analyzes package dependencies including security vulnerabilities, unused packages, and outdated versions, then suggests safe upgrade paths.

Trigger/audit

FrequencyPre-deploy

DevOps engineer worried about security before deploy? Run /audit to check vulnerabilities + unused packages in one pass

SecurityPackagesMaintenance

How It Works

Run /audit

↓

Phase 1: 4 checks in parallel

vuln-scan

Scan security vulnerabilities

outdated-check

Check outdated packages

unused-detect

Detect unused packages

dup-check

Check duplicate packages

↓

Sort by priority

↓

✓ Upgrade + removal guide

Skill Code

# Dependency Audit Skill
## Trigger: /audit

When invoked:

1. Check package manager:
 - npm: run `npm audit` and `npm outdated`
 - pip: run `pip audit` and `pip list --outdated`

2. Analyze results:
 - Group vulnerabilities by severity
 - Identify unused dependencies
 - Check for duplicate packages

3. Output format:
---
## 🛡️ Dependency Audit Report

### 🔴 Critical Vulnerabilities
| Package | Version | Issue | Fix |
|---------|---------|-------|-----|

### 🟡 Outdated Packages
| Package | Current | Latest | Breaking? |
|---------|---------|--------|-----------|

### 📦 Unused Packages
- [package]: last used in [file] or not imported

### Recommended Actions
1. [highest priority action]
2. [next action]
---

Copy and paste into your CLAUDE.md to start using immediately.

How Dependency Audit Works

Dependency Audit reads your package manifest, checks each dependency against vulnerability databases and npm registry, identifies outdated packages, flags security advisories, and generates a prioritized update plan.

When to Use Dependency Audit

Should be run before every major deployment and during security reviews — it catches vulnerable dependencies that could expose your application to known exploits, and identifies abandoned packages that pose long-term risk.

Key Strengths

Checks against known vulnerability databases automatically
Identifies outdated and abandoned packages
Generates prioritized update plan by risk level
Flags breaking changes in recommended updates

Same Category

Productivity View All

CLAUDE.md Builder

Analyzes your project and auto-generates an optimized CLAUDE.md.

Project Onboarding

Quickly maps out a new project's structure and core logic.

Spec-Driven Development

Writes specs through structured interviews before jumping into implementation.

Popular in Other Categories

Session Summary

WorkflowAutomatically summarizes changes and next steps at the end of a work session.

Smart Commit

CodingAnalyzes changes and auto-generates meaningful commit messages.

API Design Assistant

DocumentationDesigns RESTful APIs and auto-generates docs and type definitions.