How do I install the Dependency Checker skill?

Run npx skillmds@latest add lyupro/dependency-checker in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Dependency Checker skill do?

Run `npm audit --json` against the target project and summarise high/critical vulnerabilities. It is listed under Security on SkillMD.

Is Dependency Checker safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Dependency Checker?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Dependency Checker free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Dependency Checker?

lyupro (@lyupro) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Dependency Checker by lyupro — Agent Skill

Name: Dependency Checker
Author: lyupro

File contents

This is a script-strategy skill. The script in scripts/main.sh runs npm audit --json inside the directory supplied via SKILLFORGE_INPUT (or the SkillForge temp cwd if input is empty), parses the output with jq, and prints a one-line summary to stdout.

Output format (one line):

high=<N> critical=<M> total=<T> packages=<P>

When npm audit errors (no package.json, no node_modules, network failure), the script prints error=<reason> and exits 0 — SkillForge returns the line as a successful invocation, the consuming agent decides what to do with the diagnostic.

Prerequisites:

config.security.allowScripts: true in the SkillForge persisted config.
npm and jq on the host's resolved PATH (on POSIX, the SandboxRunner restricts PATH to /usr/bin:/bin — install jq system-wide or override DEFAULT_PATH for this skill).
SKILLFORGE_INPUT set to an absolute path of the project to audit, or unset to audit the temp cwd (which will report no package.json — usually pass the path explicitly).

Frequently asked questions

Dependency Checker