Security Audit Weekly
FeaturedScheduledAbout Security Audit Weekly
An interval-triggered maintenance loop that periodically checks npm dependencies for known vulnerabilities. A round runs npm audit --json, ranks the findings, and posts a summary that includes a remediation plan.
Key features
- 01Structured results from npm audit --json
- 02Findings ranked by priority
- 03Every summary carries a remediation plan
- 04Starts on an interval with no manual trigger
Use cases
- 01Routine weekly dependency security check
- 02Preparing a security status update for a team
- 03Planning upgrade work from audit results
- Goal
- A weekly npm audit summary is delivered together with a remediation plan.
- Exit when
- Stop once the summary is posted with its fixes listed in priority order.
- Between iterations run
- npm audit --json
Launch prompt
Paste into Claude Code. The agent repeats the steps below until the exit condition is met.
Start the "Security Audit Weekly" loop. Goal: A weekly npm audit summary is delivered together with a remediation plan. Step 1: Run npm audit — Execute the audit command and parse the JSON output to get the current list of vulnerabilities in the dependencies. `npm audit --json` Step 2: Rank by priority — Order the findings by severity and reach, deciding which ones need attention first. Step 3: Draft the remediation plan — List the fix for each of the top-ranked issues so the plan is clear and actionable. Step 4: Post the summary — Combine the audit results and the prioritized fixes into this week's summary and post it. Posting ends the round. Between iterations run: `npm audit --json` Exit when: Stop once the summary is posted with its fixes listed in priority order.
Steps
Each round runs in order; if the exit condition isn’t met, another round starts, up to 1.
Execute the audit command and parse the JSON output to get the current list of vulnerabilities in the dependencies.
npm audit --jsonOrder the findings by severity and reach, deciding which ones need attention first.
List the fix for each of the top-ranked issues so the plan is clear and actionable.
Combine the audit results and the prioritized fixes into this week's summary and post it. Posting ends the round.
Supported agents
Coding agents that can run this loop directly.