mcpField
C
codebase-cleanup-deps-audit

codebase-cleanup-deps-audit

github.com/sickn33Security48.7k386 installsUpdated today
Repository

About codebase-cleanup-deps-audit

A skill for reviewing project dependencies for vulnerabilities, license conflicts, outdated packages, and supply-chain risks. It is intended for dependency audits and produces prioritized remediation recommendations with compatibility notes.

Key features

  1. 01Inventory direct and transitive dependencies
  2. 02Scan for vulnerabilities and license issues
  3. 03Prioritize risks by severity and exposure
  4. 04Recommend upgrades with compatibility notes
  5. 05Structure findings as a security report

Use cases

  1. 01Audit a project’s dependency security
  2. 02Check license compliance and supply-chain risks
  3. 03Plan package upgrades and mitigations

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/sickn33/agentic-awesome-skills --skill codebase-cleanup-deps-audit

After installing, type/codebase-cleanup-deps-auditin Claude Code to confirm it loaded.

Bundled filesresources/implementation-playbook.md

Details

From the project README

Dependency Audit and Security Analysis

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

Use this skill when

  • Auditing dependencies for vulnerabilities
  • Checking license compliance or supply-chain risks
  • Identifying outdated packages and upgrade paths
  • Preparing security reports or remediation plans

Do not use this skill when

  • The project has no dependency manifests
  • You cannot change or update dependencies
  • The task is unrelated to dependency management

Context

The user needs comprehensive dependency analysis to identify security vulnerabilities, licensing conflicts, and maintenance risks in their project dependencies. Focus on actionable insights with automated fixes where possible.

Requirements

$ARGUMENTS

Instructions

  • Inventory direct and transitive dependencies.
  • Run vulnerability and license scans.
  • Prioritize fixes by severity and exposure.
  • Propose upgrades with compatibility notes.
  • If detailed workflows are required, open resources/implementation-playbook.md.

Safety

  • Do not publish sensitive vulnerability details to public channels.
  • Verify upgrades in staging before production rollout.

Output Format

  • Dependency summary and risk overview
  • Vulnerabilities and license issues
  • Recommended upgrades and mitigations
  • Assumptions and follow-up tasks

Resources

  • resources/implementation-playbook.md for detailed tooling and templates.

Limitations

  • Use this skill only when the task clearly matches the scope described above.
  • Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
  • Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Comments

Markdown supported