Dependency Audit

The bobmatnyc-dependency-audit skill enables AI agents to automatically scan project files for outdated or vulnerable software packages. It identifies specific dependencies within a codebase that require updates to maintain security and stability.

When to use it

• Before deploying production builds to ensure no known vulnerabilities are present in third-party libraries.
• During routine maintenance cycles to detect when core frameworks have reached end-of-life status.
• When integrating new open-source modules to verify they do not introduce conflicting or insecure versions of existing tools.
• Prior to code reviews to flag potential security risks associated with legacy dependencies.

Key capabilities

• Scans project directories to map all installed software packages.
• Compares current versions against known vulnerability databases and release histories.
• Generates actionable reports highlighting specific files and lines requiring attention.

Example prompts

• "Run a full dependency audit on the src folder and list any packages with security advisories."
• "Check if our project is using deprecated versions of React or Node.js modules."
• "Audit the backend configuration for outdated SSL libraries that might be vulnerable to MITM attacks."

Tips & gotchas

Ensure your AI agent has read access to the entire project directory, as hidden folders often contain critical dependency manifests. This skill focuses on identification; you must manually apply patches or upgrade commands based on its findings.