codebase-cleanup-deps-audit
Audits project dependencies for security vulnerabilities and license issues while recommending upgrades.
Install
mkdir -p .claude/skills/codebase-cleanup-deps-audit && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/2645" && unzip -o skill.zip -d .claude/skills/codebase-cleanup-deps-audit && rm skill.zipInstalls to .claude/skills/codebase-cleanup-deps-audit
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.Key capabilities
- →Inventory direct and transitive dependencies
- →Run vulnerability and license scans
- →Prioritize fixes by severity and exposure
- →Propose upgrades with compatibility notes
- →Identify outdated packages and upgrade paths
- →Generate dependency summary and risk overview
How it works
The skill inventories project dependencies, runs vulnerability and license scans, and prioritizes fixes. It then proposes upgrades with compatibility notes and identifies outdated packages.
Inputs & outputs
When to use codebase-cleanup-deps-audit
- →Auditing dependencies for vulnerabilities
- →Checking license compliance
- →Updating outdated packages
About this skill
Dependency Audit and Security Analysis
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Use this skill when
- Auditing dependencies for vulnerabilities
- Checking license compliance or supply-chain risks
- Identifying outdated packages and upgrade paths
- Preparing security reports or remediation plans
Do not use this skill when
- The project has no dependency manifests
- You cannot change or update dependencies
- The task is unrelated to dependency management
Context
The user needs comprehensive dependency analysis to identify security vulnerabilities, licensing conflicts, and maintenance risks in their project dependencies. Focus on actionable insights with automated fixes where possible.
Requirements
$ARGUMENTS
Instructions
- Inventory direct and transitive dependencies.
- Run vulnerability and license scans.
- Prioritize fixes by severity and exposure.
- Propose upgrades with compatibility notes.
- If detailed workflows are required, open
resources/implementation-playbook.md.
Safety
- Do not publish sensitive vulnerability details to public channels.
- Verify upgrades in staging before production rollout.
Output Format
- Dependency summary and risk overview
- Vulnerabilities and license issues
- Recommended upgrades and mitigations
- Assumptions and follow-up tasks
Resources
resources/implementation-playbook.mdfor detailed tooling and templates.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
When not to use it
- →The project has no dependency manifests
- →Dependencies cannot be changed or updated
How it compares
This skill provides a structured analysis of dependencies for security and compliance, offering actionable remediation strategies, unlike a manual review that might miss critical issues.
Compared to similar skills
codebase-cleanup-deps-audit side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| codebase-cleanup-deps-audit (this skill) | 2 | 4mo | No flags | Intermediate |
| security-audit | 0 | 2mo | No flags | Advanced |
| qa-security | 0 | 1mo | Review | Intermediate |
| dependency-audit | 0 | 4mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by sickn33
View all by sickn33 →You might also like
security-audit
hiroshiyui
Perform a project-wide security and safety audit of the 5thPlanet workspace.
qa-security
christopherlouet
Perform a security audit based on OWASP. Use when the user wants to verify security, look for vulnerabilities, or before a production deployment.
dependency-audit
hadsie
Audit Python dependencies for vulnerabilities, outdated
contrib-pr-review
homeassistant-ai
Review a contribution PR for safety, quality, and readiness. Checks for security concerns, test coverage, size appropriateness, and intent alignment. Use when reviewing external contributions.
verifier
oleyna80
Pre-merge quality gate. Use to verify code is ready to ship: route contracts (status, Content-Type, body), TypeScript, tests, CSP/CSRF headers, schema alignment, secret leak scan. Issues structured READY or BLOCKED verdict with file:line evidence. Read-only. Для верификации, проверки перед мержем, и
senior-security
davila7
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.