Agent skill
audit-dependencies
Run npm audit and check for outdated/vulnerable dependencies. Returns structured output with vulnerability counts by severity, outdated packages, and recommended updates. Used for security validation and dependency health checks.
Install this agent skill to your Project
npx add-skill https://github.com/BerryKuipers/claude-code-toolkit/tree/main/.claude/api-skills-source/audit-dependencies
SKILL.md
Audit Dependencies
Executes npm audit and outdated checks to validate dependency security and freshness.
Usage
This skill runs dependency audits and returns structured security/maintenance results.
Checks Performed
-
Security Audit (
npm audit)- Vulnerability scanning
- Severity classification (critical/high/moderate/low)
- Affected packages
-
Outdated Packages (
npm outdated)- Packages behind latest versions
- Semver distance (patch/minor/major)
- Update recommendations
Output Format
Success (No Vulnerabilities)
{
"status": "success",
"audit": {
"vulnerabilities": {
"critical": 0,
"high": 0,
"moderate": 0,
"low": 0,
"total": 0
},
"outdated": {
"count": 5,
"packages": [
{"name": "react", "current": "18.2.0", "latest": "18.3.1", "type": "minor"}
]
}
},
"canProceed": true
}
Vulnerabilities Found
{
"status": "error",
"audit": {
"vulnerabilities": {
"critical": 2,
"high": 5,
"moderate": 10,
"low": 3,
"total": 20
},
"packages": [
{
"name": "lodash",
"severity": "high",
"via": ["prototype pollution"],
"fix": "npm install lodash@latest"
}
],
"outdated": {
"count": 12,
"packages": []
}
},
"canProceed": false,
"details": "2 critical and 5 high severity vulnerabilities must be fixed"
}
When to Use
- Security validation (before deployment)
- Regular maintenance checks
- Conductor Phase 3 (Quality Assurance)
- Security audit agent workflows
- Dependency update planning
Requirements
- npm or package manager installed
- package.json and package-lock.json present
- Internet connection for vulnerability database
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
BerryKuipers/claude-code-toolkit
validate-typescript
Run TypeScript compiler type-checking (tsc --noEmit) to validate type safety and catch type errors. Returns structured output with error counts, categories (type/syntax/import errors), and affected files. Used for quality gates and pre-commit validation.
BerryKuipers/claude-code-toolkit
validate-coverage-threshold
Validate test coverage meets minimum thresholds (default 80% overall, 80% statements, 75% branches, 80% functions). Parses coverage reports from coverage/coverage-summary.json or test output. Returns pass/fail status with detailed metrics and identifies uncovered files.
BerryKuipers/claude-code-toolkit
quality-gate
Comprehensive quality validation for TypeScript/JavaScript projects - runs TypeScript checks, tests, coverage analysis, build validation, and linting with structured JSON results
BerryKuipers/claude-code-toolkit
run-comprehensive-tests
Execute comprehensive test suite (Vitest/Jest) with coverage reporting and failure analysis. Returns structured output with test counts (total/passed/failed), coverage percentage, duration, and detailed failure information. Used for quality gates and CI/CD validation.
BerryKuipers/claude-code-toolkit
validate-build
Run production build validation (npm run build, vite build, tsc) to ensure code compiles and builds successfully. Returns structured output with build status, duration, size metrics, and error details. Used for quality gates and deployment readiness checks.
BerryKuipers/claude-code-toolkit
validate-lint
Run ESLint and Prettier validation to check code style, formatting, and best practices. Returns structured output with error/warning counts, rule violations, and affected files. Used for code quality gates and pre-commit validation.
Didn't find tool you were looking for?