# Dependency Audit

> Audit Python deps for vulnerabilities updates and licenses

- Skill: `loopyluci/dependency-audit` (Agent Skill)
- Install (CLI): `npx skillmds@latest add loopyluci/dependency-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/loopyluci/dependency-audit/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: LoopyLuci (https://skillmd.com/u/loopyluci)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/loopyluci/dependency-audit

---


# Dependency Audit

## Check for Vulnerabilities

```bash
# pip-audit
pip install pip-audit
pip-audit

# Safety
pip install safety
safety check

# pip freeze comparison
pip freeze | safety check --stdin
```

## Check for Outdated Packages

```bash
pip list --outdated

# pip-upgrader
pip install pip-upgrader
pip-upgrade
```

## License Checking

```bash
pip install pip-licenses
pip-licenses
pip-licenses --summary
pip-licenses --allow-only "MIT;Apache-2.0"
```

## requirements.txt Hygiene

```bash
# Generate from installed
pip freeze > requirements.txt

# Generate with hashes (secure)
pip freeze --require-hashes > requirements.txt

# Compile from setup.cfg/pyproject.toml
pip install pip-tools
pip-compile pyproject.toml
```

## Automated Audit (Cron)

```bash
hermes cron create \
  --schedule "0 9 * * 1" \
  --script "scripts/dep-audit.sh" \
  --no-agent \
  --deliver telegram
```

Script outputs only when issues found (empty = silent).