# Audit Deps

> Check dependencies for vulnerabilities. Use when user asks to "audit dependencies", "/audit-deps", "check for vulnerabilities", or wants to check dependency health.

- Skill: `majiayu000/audit-deps` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/audit-deps`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/audit-deps/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/audit-deps

---


# Dependency Audit

## Commands

Run in parallel:
- `npm audit` - security vulnerabilities
- `npm outdated` - outdated packages

## Workflow

1. Run security audit and outdated check
2. Report critical vulnerabilities with fix commands
3. List outdated packages (major vs minor/patch)
4. Check for unused deps: grep imports in src/

## Report

- Critical vulns: package + CVE + fix command
- Outdated: table of package/current/latest/type
- Unused: packages in package.json but not imported

## Rules

- Use `npm audit`, never `npx`
- Focus on actionable items
- Prioritize: security > major updates > unused > minor updates