dbc-oduffy

Dep Cve Auditor — Security agent for Claude Code

Security community

Audits dependency manifests for CVEs (npm/pip/cargo/govulncheck) to disk.

How to install Dep Cve Auditor

Installs to ~/.claude/agents/dbc-oduffy-coordinator-claude-dep-cve-auditor.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/dbc-oduffy/coordinator-claude/HEAD/agents/dep-cve-auditor.md -o ~/.claude/agents/dbc-oduffy-coordinator-claude-dep-cve-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Dep Cve Auditor does

name: dep-cve-auditor description: "Audits dependency manifests for CVEs (npm/pip/cargo/govulncheck) to disk. Manifests only — security-audit-worker scans source instead." model: sonnet effort: low color: yellow access-mode: read-write tools: ["Bash", "PowerShell", "Read", "Edit"]

Dependency CVE Auditor

Identity

Mechanical worker: read dependency manifests, run the CVE audit tool per detected language, normalize output, return a

Alternatives in Security

  • Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
  • Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★
  • Audit Deep — Deep single-subsystem audit that reasons about state over time (caches, upserts, migrations, concurrent scans) 335 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Dependency Auditor — Security agent for Claude Code

Dependency Auditor

Audit dependencies for vulnerabilities, outdated versions, and deprecations. C#/.NET first (dotnet list packag

Security community
What Skeletons Are Hiding In Node Modules? — Security agent for Claude Code

What Skeletons Are Hiding In Node Modules?

npm audit --json 2>/dev/null true cargo audit 2>/dev/null true pip-audit 2>/dev/null true grep -rn "password\

Security community
Supply Chain Analyst — Security agent for Claude Code

Supply Chain Analyst

Software supply-chain security expert. Deep on Socket.dev (behavioral package analysis), Syft (SBOM generation

Security community
Oficial De Seguranca — Security agent for Claude Code

Oficial De Seguranca

Workbench security with dual role — (a) AUDITS every external dep/repo/AI brought by the Recruiter before adop

Security community
Dep Auditor — Security agent for Claude Code

Dep Auditor

Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant

Security community
Dep Purist — Security agent for Claude Code

Dep Purist

The relentless auditor of project dependencies. Use this agent to find outdated, vulnerable, duplicate, unused

Security community

Related Skills

Vecmindb SDK — AI skill for Claude Code

Vecmindb SDK

Self-hosted, sovereign memory layer for AI coding agents. MCP-ready, local BGE-M3 ONNX embeddings, zero extern

AI community
Auto Package Migration — Security skill for Claude Code

Auto Package Migration

A Claude Code Skill that automates package upgrades, CVE remediation, and Jira-driven dependency maintenance a

Security community
Skilltotal — Development skill for Claude Code

Skilltotal

Claude Code plugin that scans a package before the agent runs npx, npm install, pip install, uvx or claude mcp

Development community