# Dependabot Check

> Check and update vulnerable dependencies

- Skill: `majiayu000/dependabot-check` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/dependabot-check`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/dependabot-check/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/dependabot-check

---


# Dependency Vulnerability Check

Check NuGet and npm dependencies for known vulnerabilities.

## What To Do

1. **.NET dependencies**:
   ```bash
   dotnet list package --vulnerable --include-transitive
   dotnet list package --outdated
   ```

2. **npm dependencies**:
   ```bash
   npm audit --json > npm-audit.json
   npm audit fix
   ```

3. **Configure Dependabot** (.github/dependabot.yml):
   ```yaml
   version: 2
   updates:
     - package-ecosystem: "nuget"
       directory: "/src/backend"
       schedule: { interval: "weekly" }
     - package-ecosystem: "npm"
       directory: "/src/frontend"
       schedule: { interval: "weekly" }
   ```

4. **Update specific package**: `dotnet add package PackageName --version X.Y.Z`

## Arguments
- `--ecosystem=<type>`: nuget or npm
- `--auto-merge`: Auto-merge minor/patch updates