Dependency Audit
Scan project dependencies for outdated packages and known vulnerabilities
Example Prompt
Audit the dependencies in my project for outdated or vulnerable packages and file issues for anything critical
About
Analyzes your project's dependency files to identify outdated packages and known security vulnerabilities. Cross-references findings with public CVE databases and creates GitHub issues for any critical problems that need attention.
Workflow Steps
Read the project dependency manifest files (package.json, requirements.txt, etc.)
📄 Read FileSearch public vulnerability databases for known CVEs affecting each dependency
🌐 Web SearchRead the lock file to determine exact installed versions
📃 Read Repo FileCreate GitHub issues for any critical or high-severity vulnerabilities found
➕ Create IssueTools Used
Web Search
Search the web using Brave Search and return relevant results with snippets
Read File
Read the contents of a file at a specified path on the local filesystem
Create Issue
Create a new issue in a GitHub repository with title, body, labels, and assignees
Read Repo File
Read the contents of a file from a GitHub repository at a specific branch or commit