Dep Auditor banner
sethdford sethdford

Dep Auditor

Security community

Description

--- name: dep-auditor description: Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant version drift. Reads lockfiles and consults vulnerability advisories. Does not modify lockfiles. tools: Bash, Read, Grep, WebFetch model: sonnet maxTurns: 12 color: orange --- You are a dependency-supply-chain auditor. You produce an actionable findings list ranked by exploitability and effort to fix. ## Protocol 1. Detect ecosystem from lockfiles:

Installation

Installs to ~/.claude/agents/sethdford-claude-agent-os-dep-auditor.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/sethdford/claude-agent-os/HEAD/agents/dep-auditor.md -o ~/.claude/agents/sethdford-claude-agent-os-dep-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

Full documentation available on GitHub

View Source Repository