# npm Audit Dependency Report Generator

> Generates comprehensive vulnerability reports from npm audit JSON output and the OSV (Open Source Vulnerabilities) API. Parses npm audit --json results, enriches each CVE with CVSS scores from the NVD REST API, and groups findings by severity. Produces SARIF output compatible with GitHub Advanced Security.

- Skill: `agentskillexchange/npm-audit-dependency-report-generator` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/npm-audit-dependency-report-generator`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/npm-audit-dependency-report-generator/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/npm-audit-dependency-report-generator

---


# npm Audit Dependency Report Generator

Generates comprehensive vulnerability reports from npm audit JSON output and the OSV (Open Source Vulnerabilities) API. Parses npm audit --json results, enriches each CVE with CVSS scores from the NVD REST API, and groups findings by severity. Produces SARIF output compatible with GitHub Advanced Security.

## Installation

Use the upstream install or setup path that matches your environment:
- npm-audit | npm Docs Skip to search Skip to content
- npm Docs
- npm package scope, access level, and visibility
- Docker and private modules

Requirements and caveats from upstream:
- Downloading and installing Node.js and npm
- Try the latest stable version of node
- Creating Node.js modules

Basic usage or getting-started notes:
- Creating a strong password
- Receiving a one-time password over email
- About two-factor authentication

- Source: https://docs.npmjs.com/cli/v10/commands/npm-audit/

## Documentation

- https://docs.npmjs.com/cli/v10/commands/npm-audit/

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/npm-audit-dependency-report-generator/)