# Dependency Vulnerability Audit

> 开源供应链安全与依赖漏洞审计。执行 npm audit / pip audit 检查 CVE 漏洞与投毒包。

- Skill: `2428424081cn/dependency-vulnerability-audit` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add 2428424081cn/dependency-vulnerability-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/2428424081cn/dependency-vulnerability-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: 2428424081cn (https://skillmd.com/u/2428424081cn)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/2428424081cn/dependency-vulnerability-audit

---


# 开源依赖安全与 CVE 漏洞审计指南

在项目上线或集成测试前执行依赖审计：
```bash
node scripts/run_npm_audit.mjs
```