Then restart Claude Desktop to detect the new scheduled task. Configure the schedule in Claude Desktop settings under "Scheduled Tasks".
The bridge must be running when this task fires. Start it with claude-ide-bridge --watch or npm run start-all.
Emergency stop: Set CLAUDE_CODE_DISABLE_CRON=1 in your environment to immediately halt all scheduled cron jobs mid-session. Useful if a task runs amok or you need to suppress scheduled runs temporarily.
name: dependency-audit
description: Scan dependencies for security vulnerabilities and outdated packages. Run weekly via Claude Desktop scheduled tasks.
Dependency Security Audit
Scan all project dependencies for known security vulnerabilities.
Steps
Call getProjectInfo to detect the project type and package manager
Call getSecurityAdvisories to check for known CVEs in dependencies
Call auditDependencies to run the package manager's native audit (npm audit, cargo audit, pip-audit, etc.)
Call getDependencyTree to understand the full dependency graph for any flagged packages
Report Format
# Dependency Audit — <date>
## Package Manager: <npm|cargo|pip|go>
## Vulnerabilities Found: <N total>
### Critical (N)
<package@version — CVE-XXXX-XXXXX — description>
Fix: upgrade to <version> | No fix available
### High (N)
<package@version — CVE-XXXX-XXXXX — description>
Fix: upgrade to <version> | No fix available
### Moderate (N)
<package@version — description>
## Outdated Packages
<package — current → latest> (only packages ≥1 major version OR ≥3 minor versions behind)
Direct: listed in package.json. Transitive: pulled in by direct dependencies.
## Recommended Actions
1. <specific upgrade command or action>
2. <specific upgrade command or action>
## Overall: SECURE | REVIEW NEEDED | ACTION REQUIRED
REVIEW NEEDED — 1-2 moderate advisories OR ≥3 outdated packages
ACTION REQUIRED — any critical/high vulnerability
Guidelines
Focus on actionable findings — skip informational-only advisories
Report only packages ≥1 major version OR ≥3 minor versions behind as "outdated"
Direct dependencies: listed in package.json. Transitive: pulled in by direct dependencies. Flag transitive dependencies separately.
For each vulnerability, include the fix command if one exists (e.g., npm install package@version)
If no vulnerabilities found, report "All clear — 0 vulnerabilities across N dependencies"
1---2name: oolab-labs-claude-ide-bridge3description: Installation4---5## Installation67Copy this template to your Claude Desktop scheduled-tasks directory:89```bash10mkdir -p ~/.claude/scheduled-tasks/dependency-audit11cp /path/to/claude-ide-bridge/templates/scheduled-tasks/dependency-audit/SKILL.md \12 ~/.claude/scheduled-tasks/dependency-audit/SKILL.md13```1415Then restart Claude Desktop to detect the new scheduled task. Configure the schedule in Claude Desktop settings under "Scheduled Tasks".1617> The bridge must be running when this task fires. Start it with `claude-ide-bridge --watch` or `npm run start-all`.1819> **Emergency stop**: Set `CLAUDE_CODE_DISABLE_CRON=1` in your environment to immediately halt all scheduled cron jobs mid-session. Useful if a task runs amok or you need to suppress scheduled runs temporarily.2021---22---23name: dependency-audit24description: Scan dependencies for security vulnerabilities and outdated packages. Run weekly via Claude Desktop scheduled tasks.25---2627# Dependency Security Audit2829Scan all project dependencies for known security vulnerabilities.3031## Steps32331. Call `getProjectInfo` to detect the project type and package manager342. Call `getSecurityAdvisories` to check for known CVEs in dependencies353. Call `auditDependencies` to run the package manager's native audit (npm audit, cargo audit, pip-audit, etc.)364. Call `getDependencyTree` to understand the full dependency graph for any flagged packages3738## Report Format3940```41# Dependency Audit — <date>4243## Package Manager: <npm|cargo|pip|go>4445## Vulnerabilities Found: <N total>4647### Critical (N)48<package@version — CVE-XXXX-XXXXX — description>49 Fix: upgrade to <version> | No fix available5051### High (N)52<package@version — CVE-XXXX-XXXXX — description>53 Fix: upgrade to <version> | No fix available5455### Moderate (N)56<package@version — description>5758## Outdated Packages59<package — current → latest> (only packages ≥1 major version OR ≥3 minor versions behind)60Direct: listed in package.json. Transitive: pulled in by direct dependencies.6162## Recommended Actions631. <specific upgrade command or action>642. <specific upgrade command or action>6566## Overall: SECURE | REVIEW NEEDED | ACTION REQUIRED67```6869## Grading Criteria7071- **SECURE** — 0 vulnerabilities + ≤2 patch-level outdated packages72- **REVIEW NEEDED** — 1-2 moderate advisories OR ≥3 outdated packages73- **ACTION REQUIRED** — any critical/high vulnerability7475## Guidelines7677- Focus on actionable findings — skip informational-only advisories78- Report only packages ≥1 major version OR ≥3 minor versions behind as "outdated"79- Direct dependencies: listed in package.json. Transitive: pulled in by direct dependencies. Flag transitive dependencies separately.80- For each vulnerability, include the fix command if one exists (e.g., `npm install package@version`)81- If no vulnerabilities found, report "All clear — 0 vulnerabilities across N dependencies"
Run npx skillmds@latest add bilal140202/oolab-labs-claude-ide-bridge in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Installation It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
Bilal140202 (@bilal140202) published this skill. Their other Agent Skills are listed on their SkillMD profile.
Bilal140202