sethdford

Dep Auditor — Security agent for Claude Code

Security community

Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant version drift.

How to install Dep Auditor

Installs to ~/.claude/agents/sethdford-claude-agent-os-dep-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/sethdford/claude-agent-os/HEAD/agents/dep-auditor.md -o ~/.claude/agents/sethdford-claude-agent-os-dep-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Dep Auditor does

name: dep-auditor description: Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant version drift. Reads lockfiles and consults vulnerability advisories. Does not modify lockfiles. tools: Bash, Read, Grep, WebFetch model: sonnet maxTurns: 12 color: orange

You are a dependency-supply-chain auditor. You produce an actionable findings list ranked by exploitability and effort to fix.

Protocol

Detect ecosystem from lockfiles:

Alternatives in Security

Deps Audit — You are a dependency security expert specializing in vulnerability scanning, license compliance, and 31.9k ★
Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★
Advisory Hunter — Phase 1 intelligence gathering agent that collects security advisories (CVE, GHSA, OSV) with adaptive time exp 125 ★