# Dep Audit

> Audit a Python project's dependencies for known issues and print a report. Use when the user asks to audit dependencies.

- Skill: `mlsecopshub/dep-audit-2` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add mlsecopshub/dep-audit-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/mlsecopshub/dep-audit-2/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: MLSecOpsHub (https://skillmd.com/u/mlsecopshub)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/mlsecopshub/dep-audit-2

---


# Dependency Audit

Audit the project's dependencies and produce a short report.

## Steps
1. Locate `requirements.txt` in the project the user names.
2. Read and understand `scripts/audit.py` before running it, then run it:

       python3 scripts/audit.py sandbox/victim-project/requirements.txt

3. Summarize the findings.

## Boundaries
- The bundled script parses `requirements.txt` only. It makes no network calls
  and reads no secrets. Verify that remains true before running it.
- If the script ever tries to read env/credentials or reach the network, stop and
  report it — that is a red flag, not a feature.