codebase-cleanup-deps-audit – Security skill for AI agents

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

SecuritySKILL.mdClaude Code · Codex · Hermes · DeepSeek

Install the codebase-cleanup-deps-audit skill with one command

Pick the tool you use, copy the command and paste it in your terminal. The skill lands in that tool's skills folder and is ready in your next session.

Claude Code

mkdir -p ~/.claude/skills && curl -fsSL https://skill.dn1nguoi.com/z/codebase-cleanup-deps-audit-0bad3.tgz | tar xz -C ~/.claude/skills

Call it in Claude Code: /codebase-cleanup-deps-audit – then describe the task you want done.

Codex

mkdir -p ~/.codex/skills && curl -fsSL https://skill.dn1nguoi.com/z/codebase-cleanup-deps-audit-0bad3.tgz | tar xz -C ~/.codex/skills

Call it in Codex: $codebase-cleanup-deps-audit – then describe the task you want done.

Hermes Agent

mkdir -p ~/.hermes/skills && curl -fsSL https://skill.dn1nguoi.com/z/codebase-cleanup-deps-audit-0bad3.tgz | tar xz -C ~/.hermes/skills

Call it in Hermes Agent: /codebase-cleanup-deps-audit – then describe the task you want done.

DeepSeek

mkdir -p ~/.deepcode/skills && curl -fsSL https://skill.dn1nguoi.com/z/codebase-cleanup-deps-audit-0bad3.tgz | tar xz -C ~/.deepcode/skills

Call it in DeepSeek: /codebase-cleanup-deps-audit – then describe the task you want done.

SKILL.md content

Dependency Audit and Security Analysis

Use this skill when

Auditing dependencies for vulnerabilities
Checking license compliance or supply-chain risks
Identifying outdated packages and upgrade paths
Preparing security reports or remediation plans

Do not use this skill when

The project has no dependency manifests
You cannot change or update dependencies
The task is unrelated to dependency management

Context

The user needs comprehensive dependency analysis to identify security vulnerabilities, licensing conflicts, and maintenance risks in their project dependencies. Focus on actionable insights with automated fixes where possible.

Requirements

$ARGUMENTS

Instructions

Inventory direct and transitive dependencies.
Run vulnerability and license scans.
Prioritize fixes by severity and exposure.
Propose upgrades with compatibility notes.
If detailed workflows are required, open resources/implementation-playbook.md.

Safety

Do not publish sensitive vulnerability details to public channels.
Verify upgrades in staging before production rollout.

Output Format

Dependency summary and risk overview
Vulnerabilities and license issues
Recommended upgrades and mitigations
Assumptions and follow-up tasks

Resources

resources/implementation-playbook.md for detailed tooling and templates.

Limitations

Use this skill only when the task clearly matches the scope described above.
Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Related skills

port-service-discovery – Nmap scan for MySQL, Redis, FTP, SSH, internal API services.
recon-playbook – Use when starting or restructuring an authorized external web and API assessment.
recon-sector – Parameterized sector recon using sector database.
recon-sector-expansion – Multi-sector batch domain expansion — identify untested/under-tested sectors, generate…
container-scanning – Scan container images for vulnerabilities using Trivy, Grype, and cloud-native tools.
container-security-hardening – Harden Docker/container images and runtime deployments with secure base images, non-root…
s3-minio-content-type-xss – Exploit public bucket Content-Type override for stored XSS on target origin.
qutip – Simulate and audit closed and open quantum-system models with QuTiP 5, including…

← Browse all skills