Audit Dependency Versions

What it does

This skill analyzes a project's dependency file (e.g., package.json, requirements.txt) and identifies outdated or vulnerable versions of dependencies. It provides a report detailing the current versions, available updates, and potential security risks associated with those vulnerabilities. The tool aims to improve project stability and security by ensuring dependencies are up-to-date.

When to use it

• Security Audits: Regularly check for known vulnerabilities in your project's dependencies before deployment.
• Dependency Updates: Determine which dependencies require updates to maintain compatibility or access new features.
• New Project Setup: Ensure a clean and secure starting point by identifying potential dependency issues early on.
• Post-Merge Checks: Verify that merged pull requests haven’t introduced outdated or vulnerable dependencies.

Key capabilities

• Parses common dependency files (e.g., package.json, requirements.txt).
• Identifies available updates for each dependency.
• Highlights potential security vulnerabilities within dependencies.
• Generates a report summarizing findings.

Example prompts

• "Audit the dependencies in my package.json file."
• "Check for vulnerable versions in my Python project's requirements.txt."
• “Generate a report of outdated packages.”

Tips & gotchas

The skill requires access to the relevant dependency files within the project directory. Ensure the AI agent has appropriate permissions and context to locate and analyze these files accurately.