# Dep Audit

> Run a security audit and dependency check on project dependencies. Use when you want to check for vulnerabilities, audit packages, or update outdated dependencies.

- Skill: `justnau1020/dep-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add justnau1020/dep-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/justnau1020/dep-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: justnau1020 (https://skillmd.com/u/justnau1020)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/justnau1020/dep-audit

---


# Dependency Audit

Run a security and freshness audit of project dependencies.

## Steps

### 1. Check for known vulnerabilities

For Python projects:
```bash
pip-audit
```
If pip-audit is not installed: `pip install pip-audit`

For Node.js projects:
```bash
npm audit
```

### 2. Check for outdated packages

For Python:
```bash
pip list --outdated
```

For Node.js:
```bash
npm outdated
```

### 3. Report

For each issue found:
- **Vulnerability**: Package name, CVE ID, severity, affected version, fixed version
- **Outdated**: Package name, current version, latest version, whether upgrade is safe

### 4. Fix recommendations

- For vulnerabilities: upgrade to the fixed version immediately
- For outdated packages: check changelog for breaking changes before upgrading
- Update dependency config (pyproject.toml, package.json, etc.) with new version constraints
- Run the full test suite after any dependency change