dependency-audit SKILL.md skillA

This file is byte-identical to the first copy the registry indexed. Same content hash, so the same checks give both the same grade.

dependency-audit from khaledsaeed18/dotclaude is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

mdr add khaledsaeed18/dotclaude/dependency-audit@git:20260704.e42ba44

Pins git:20260704.e42ba44 in mdr.lock. Pin the fingerprint instead.

Audit grade

A, 17 of 17 checks passed

Kind

SKILL.md skill

Repository

khaledsaeed18/dotclaude

Path

skills/security/dependency-audit/SKILL.md

Versions recorded

3

Latest version

git:20260704.e42ba44, committed Jul 4, 2026

First version recorded

Jun 6, 2026

Size

2,241 bytes

Repository stars

5

License

MIT

Audit a project's dependencies for outdated and vulnerable packages and surface breaking-change notes for upgrades. Works with any ecosystem, including npm/pnpm/yarn, pip/Poetry/uv, Cargo, Go modules, Maven/Gradle, Bundler, Composer, and others. Use when checking a project's dependency health, planning upgrades, or responding to a vulnerability report.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

Audit this project's dependencies for risk and staleness, then recommend a safe upgrade path. Detect the ecosystem before running anything.

## Detect the ecosystem

Identify the package manager(s) from the manifests and lockfiles present, then use that ecosystem's native tooling. Common cases:

- **JS/TS**: `npm audit` / `pnpm audit` / `yarn npm audit`; `npm outdated`.
- **Python**: `pip list --outdated`, `pip-audit`; Poetry/uv equivalents.
- **Rust**: `cargo outdated`, `cargo audit`.
- **Go**: `go list -m -u all`, `govulncheck`.
- **Java**: `mvn versions:display-dependency-updates`, OWASP dependency-check; Gradle equivalents.
- **Ruby**: `bundle outdated`, `bundle-audit`.
- **PHP**: `composer outdated`, `composer audit`.

If a tool isn't installed, say so and give the exact command to run rather than guessing results. Never invent advisory IDs or version numbers; quote them from real tool output.

## Assess

- **Vulnerabilities**: list affected package, installed version, fixed version, severity, and advisory ID. Prioritise by severity and by whether the vulnerable code path is actually reachable from this project.
…

Read the whole file at its exact version.

How to install

mdr add khaledsaeed18/dotclaude/dependency-audit@sha256:bbc208912fb40048

[![mdr](https://markdownregistry.com/badge/art_oan4emf5e4rnzgnl.svg)](https://markdownregistry.com/a/art_oan4emf5e4rnzgnl)

Versions

The registry has recorded 3 versions of this file, between Jun 6, 2026 and Jul 4, 2026, about one every 14 days.

Audit of the latest version

Source

API

GET https://markdownregistry.com/api/v1/artifacts/art_oan4emf5e4rnzgnl
GET https://markdownregistry.com/api/v1/resolve?ref=khaledsaeed18/dotclaude/dependency-audit
GET https://markdownregistry.com/api/v1/blob/bbc208912fb4004859ee042d61b27d04a43e7fcd7e68ef407310234552707108

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from khaledsaeed18/dotclaude

Every file in khaledsaeed18/dotclaude

Other files named dependency-audit

Browse by kind, by grade A, or by owner.