Dependency Auditor

by alirezarezvani

Dependency Auditor is a Quality skill for Claude Code, published by alirezarezvani in claude-code-tresor.

766 stars167 forkson alirezarezvani/claude-code-tresorAdded 2026/08/23Repository updated 2026/07/03

View source on GitHub Download repo ZIP

agent-development-kitagentic-aiagentic-codingagentic-workflowagentsanthropic-claudeclaude-code

Install in seconds

Install Dependency Auditor

Copy Dependency Auditor into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/alirezarezvani/claude-code-tresor/tree/main/skills/security/dependency-auditor ~/.claude/skills/dependency-auditor

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/alirezarezvani/claude-code-tresor.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/security/dependency-auditor/SKILL.md in alirezarezvani/claude-code-tresor
Installs to: ~/.claude/skills/dependency-auditor
Collection: One of 8 skills cataloged from this repository
Category: Quality — 1354 skills

What Dependency Auditor does

Dependency Auditor checks package manifests and lockfiles for known vulnerabilities before deployments or after dependency changes. It runs audits like npm audit or pip-audit and suggests fixes and breaking-change risks.

Dependency Auditor is cataloged under Quality on DirSkills. Dependency Auditor comes from a repository tagged agent-development-kit, agentic-ai, agentic-coding, agentic-workflow and agents.

Documentation

README

Excerpt

Dependency Auditor Skill

Automatic dependency vulnerability checking.

When I Activate

✅ package.json modified
✅ requirements.txt changed
✅ Gemfile or pom.xml modified
✅ User mentions dependencies or vulnerabilities
✅ Before deployments
✅ yarn.lock or package-lock.json changes

What I Check

Dependency Vulnerabilities

Known CVEs in packages
Outdated dependencies with security fixes
Malicious packages
License compatibility issues
Deprecated packages

Package Managers Supported

Node.js: npm, yarn, pnpm
Python: pip, pipenv, poetry
Ruby: bundler
Java: Maven, Gradle
Go: go modules
PHP: composer

Example Alerts

NPM Vulnerability

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Dependency Auditor

What else does alirezarezvani publish alongside Dependency Auditor?
Dependency Auditor is one of 8 skills that DirSkills catalogs from alirezarezvani/claude-code-tresor, the repository it ships in. Its siblings there include API Documenter, Code Reviewer and Git Commit Helper. Each one is a separate skill with its own page in this directory, installs the same way Dependency Auditor does, and is maintained by alirezarezvani in that same repository. The rest of the collection is listed on the alirezarezvani/claude-code-tresor page.
How does Dependency Auditor compare to other Quality skills?
Dependency Auditor ranks #1000 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Dependency Auditor against them. Open each page to compare what they document and how they install.