Synthèse automatique
Ce skill guide une analyse de sécurité des dépendances d'un projet : vulnérabilités connues, conformité des licences, paquets obsolètes et plan de remédiation.
Points forts
- Couvre à la fois les dépendances directes et transitives
- Produit un rapport structuré avec risques, correctifs et tâches de suivi
- Intègre des garde-fous : pas de divulgation publique des vulnérabilités et validation en staging avant production
- Priorise les correctifs selon la sévérité et l'exposition
Limites
- Le skill ne nomme aucun outil de scan précis, s'appuyant sur un playbook externe non inclus ici
- Aucune automatisation réelle : les correctifs restent des recommandations à appliquer
- Inutilisable sans fichier de manifeste de dépendances
À utiliser lorsqu'il faut auditer les dépendances d'un projet pour des vulnérabilités, des problèmes de licence ou des paquets obsolètes avant une mise en production.
À éviter si le projet n'a pas de manifeste de dépendances ou si vous ne pouvez ni modifier ni mettre à jour les dépendances.
Analyse de sécurité
SûrThe skill is purely instructional text about dependency auditing. It declares no tools, contains no commands, scripts, network calls, or file operations, and explicitly recommends verification in staging and avoiding disclosure of vulnerability details. Nothing here could be executed destructively or exfiltrate data, so listing it poses no meaningful execution risk.
Aucun point d'attention détecté
Comment cette analyse est faiteExemples
Audit this project's dependencies for known vulnerabilities, license issues, and outdated packages, then give me a prioritized remediation plan.Review my package.json dependencies and propose safe upgrade paths with compatibility notes and staging validation steps.Check my direct and transitive dependencies for supply-chain risks and tell me which ones to fix first based on severity and exposure.name: codebase-cleanup-deps-audit description: "You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies." risk: unknown source: community date_added: "2026-02-27"
Dependency Audit and Security Analysis
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Use this skill when
- Auditing dependencies for vulnerabilities
- Checking license compliance or supply-chain risks
- Identifying outdated packages and upgrade paths
- Preparing security reports or remediation plans
Do not use this skill when
- The project has no dependency manifests
- You cannot change or update dependencies
- The task is unrelated to dependency management
Context
The user needs comprehensive dependency analysis to identify security vulnerabilities, licensing conflicts, and maintenance risks in their project dependencies. Focus on actionable insights with automated fixes where possible.
Requirements
$ARGUMENTS
Instructions
- Inventory direct and transitive dependencies.
- Run vulnerability and license scans.
- Prioritize fixes by severity and exposure.
- Propose upgrades with compatibility notes.
- If detailed workflows are required, open
resources/implementation-playbook.md.
Safety
- Do not publish sensitive vulnerability details to public channels.
- Verify upgrades in staging before production rollout.
Output Format
- Dependency summary and risk overview
- Vulnerabilities and license issues
- Recommended upgrades and mitigations
- Assumptions and follow-up tasks
Resources
resources/implementation-playbook.mdfor detailed tooling and templates.
Generateur de Politique de Confidentialite
Securite
Generez des politiques de confidentialite et CGU conformes au RGPD.
Checklist de Sécurité OWASP
Securite
Génère des checklists de sécurité applicative basées sur l'OWASP Top 10.
Modélisation de Menaces
Securite
Génère des documents de modélisation de menaces avec analyse STRIDE.