# Pip Audit

> Use this skill when the user wants to audit Python dependencies for known vulnerabilities, check requirements files for CVEs, or scan Python environments for security issues.

- Skill: `javimosch/pip-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add javimosch/pip-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/javimosch/pip-audit/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: javimosch (https://skillmd.com/u/javimosch)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/javimosch/pip-audit

---


# pip-audit Plugin

Audit Python environments for known vulnerabilities.

## Commands

### Audit
- `pip-audit audit run` — Audit Python dependencies for vulnerabilities
- `pip-audit audit json` — Audit and output JSON

## Usage Examples
- "Audit my Python dependencies for vulnerabilities"
- "Check requirements.txt for known CVEs"
- "Scan the current environment for security issues"

## Installation

```bash
pip install pip-audit
```

## Examples

```bash
# Audit current environment
pip-audit

# Audit requirements file
pip-audit -r requirements.txt

# JSON output
pip-audit --format json

# Audit with fix suggestions
pip-audit --fix
```