# Dependency Risk Audit

> Audit dependencies for security, maintenance risk, and upgrade strategy.

- Skill: `fcistud/dependency-risk-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add fcistud/dependency-risk-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/fcistud/dependency-risk-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: fcistud (https://skillmd.com/u/fcistud)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/fcistud/dependency-risk-audit

---


# Dependency Risk Audit

## When To Use
Use this skill when the task requires this exact workflow and you need repeatable, high-confidence outputs.

## Required Inputs
- Problem statement with objective and constraints
- Relevant artifacts (code, docs, metrics, logs, datasets)
- Success criteria and timeline

## Workflow
1. Clarify scope, assumptions, and non-goals.
2. Build a quick baseline snapshot of the current state.
3. Prioritize the top risks/opportunities using impact and feasibility.
4. Execute a minimal, testable improvement plan.
5. Produce artifacts that justify decisions and support handoff.

## Output Checklist
- Decision log with rationale and tradeoffs
- Action plan with owner, sequence, and rollback path
- Validation evidence (tests, metrics, or review checks)

## Quality Bar
- Recommendations are actionable, not generic.
- Claims are tied to evidence.
- Risks and failure modes are explicitly called out.