# Dep Audit

> Audit dependencies for vulnerabilities, outdated packages, unused dependencies, and license risk before release or major changes.

- Skill: `garyld1962/dep-audit-3` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add garyld1962/dep-audit-3`
- Raw SKILL.md: https://api.skillmd.com/api/skills/garyld1962/dep-audit-3/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: garyld1962 (https://skillmd.com/u/garyld1962)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/garyld1962/dep-audit-3

---


# Dependency Audit

Use existing project package managers and lockfiles. Read `references/reporting.md` for the report shape. `references/legacy/` is archival only.

## Workflow

1. Detect package ecosystems and lockfiles.
2. Prefer local audit commands already available in the repo.
3. Do not install new audit tools without approval.
4. Summarize critical/high vulnerabilities, license blockers, unused dependencies, and upgrade pressure.
5. Distinguish exploitable production risk from irrelevant dev-only noise.