dep-audit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dep-audit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The dep-audit skill provides dependency auditing, vulnerability scanning, license compliance checks, and update planning for software projects. Use this skill whenever the user asks about dependency security, outdated packages, license issues, or planning dependency upgrades.
Read, Write, Edit, Bash, Grep, Glob
Use this tool to scan a project's dependencies for known security vulnerabilities. It checks against public vulnerability databases (CVE, GitHub Advisory, OSV) and returns a list of affected packages with severity ratings, descriptions, and recommended fix versions. Invoke this when the user asks to "audit dependencies," "check for vulnerabilities," or "scan for CVEs."
Use this tool to check which dependencies in a project are outdated. It compares installed versions against the latest available versions and categorizes updates as patch, minor, or major. Invoke this when the user asks to "find outdated packages," "check for updates," or "see what needs upgrading."
Use this tool to scan all dependency licenses and check them against a compliance policy. It identifies packages with copyleft, unknown, or restricted licenses that may conflict with the project's licensing requirements. Invoke this when the user asks about "license compliance," "license audit," or "check dependency licenses." This is a Pro-tier tool.
Use this tool to generate a safe, ordered update plan for dependencies. It analyzes dependency graphs, identifies breaking changes, groups related updates, and suggests a phased rollout strategy. Invoke this when the user asks to "plan updates," "create an upgrade strategy," or "figure out the safest update order."
dep_audit to identify any critical vulnerabilities that need immediate attention.dep_outdated to see the full picture of available updates.dep_license_check to ensure no license conflicts exist (Pro users).dep_update_plan to create a safe, prioritized update roadmap.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.