jchigg2000-git

Harden Deps — Security skill for Claude Code

Security community

Deployment hardening step 3 — run ecosystem-native vulnerability audit (full tree AND production-only, so shipped CVEs are separated from dev-only ones), flag unpinned versions, abandoned packages, de.

How to install Harden Deps

Installs to ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-deps/SKILL.md

Terminal

mkdir -p ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-deps && curl -fsSL https://raw.githubusercontent.com/jchigg2000-git/claude-code-dev/HEAD/commands/harden-deps.md -o ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-deps/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Harden Deps does

description: Deployment hardening step 3 — run ecosystem-native vulnerability audit (full tree AND production-only, so shipped CVEs are separated from dev-only ones), flag unpinned versions, abandoned packages, dev-deps leaking into runtime. Read-only; --fix runs `npm audit fix` (non-breaking only) and offers to pin floating versions one-by-one. Fire on `/harden-deps`. argument-hint: "[--fix] [--no-install] [scope path]" allowed-tools: Bash(npm:*), Bash(pnpm:*), Bash(yarn:*), Bash(pip:*), Ba

Alternatives in Security

Harden — Run the harden skill to perform a systematic project hardening audit 1k ★
Reflexion — Audit and optimize the .claude/ ecosystem — skills, hooks, guides, patterns, agents, and settings — for qualit 224 ★
Code Audit — Adversarial code review tree 123 ★