Audit Updates — Security skill for Claude Code
Triage pnpm audit findings and produce a prioritized, supply-chain-cautious package-update plan, then apply approved batches.
How to install Audit Updates
Installs to ~/.claude/commands/2233admin-nimbalyst-audit-updates.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/2233admin/nimbalyst/HEAD/.claude/commands/audit-updates.md -o ~/.claude/commands/2233admin-nimbalyst-audit-updates.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Updates does
name: audit-updates description: Triage pnpm audit findings and produce a prioritized, supply-chain-cautious package-update plan, then apply approved batches
Triage the repo's `pnpm audit` output and dependency drift, then produce a **prioritized, risk-annotated update plan** that fixes real security exposure while avoiding supply-chain traps (compromised fresh releases, unnecessary major bumps, install-script risk).
**This command is two-phase.** Phase 1 investigates and reports a plan
Alternatives in Security
- Agentseal — Security toolkit for AI agents 344 ★
- Claude Leaked Files — Mirrored snapshot of Claude Code's source (exposed 2026-03-31) preserved for educational purposes, defensive s 256 ★
- Openclaw Ops — OpenClaw operations skill with health checks, repair scripts, watchdogs, update triage, and security scans 225 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Gdpr Review
Audit the codebase (or a given path/feature) for GDPR compliance and produce a prioritized findings report
Audit Update
Update all audit skills (security, llm-security, api-security, server-hardening, attack-surface, architecture-
Update Threat DB
Delegate Threat Database Updates to AgentSec
Security Notice Response
Config-driven Claude Code skill: triage a security/malfunction notice for a client website, fix or delegate it
Security Gate
Security verification for G4 — verify allocated controls actually exist and work, triage scanner output, produ
Repo Review
Audit the entire Edge-Radar repo for issues, inconsistencies, recommended updates, enhancements, and removable
Related Agents
Prompt Author
Writes or revises a Pigment template package (the design prompt) in content/templates/ / / from an approved an
Supply Chain Analyst
Software supply-chain security expert. Deep on Socket.dev (behavioral package analysis), Syft (SBOM generation
Dependency Vetter
Supply-chain security audit of a third-party package (npm today) at ONE exact resolved version, run BEFORE it