Analyze project dependencies for security vulnerabilities and updates.
--- name: dependency-analyzer description: Analyze dependencies for security and updates version: 1.3.0 --- # Dependency Analyzer Keep your dependencies secure and up-to-date. ## Analysis Types ### Security Scan - Known vulnerabilities (CVEs) - Severity levels - Remediation advice ### Update Check - Outdated packages - Breaking changes - Migration guides ### License Audit - License compatibility - Attribution requirements ## Example Report ``` DEPENDENCY ANALYSIS REPORT š¦ Total packages: 234 š“ Critical vulnerabilities: 2 š” High vulnerabilities: 5 šµ Updates available: 23 CRITICAL ISSUES: lodash@4.17.20 ā 4.17.21 CVE-2021-23337: Prototype Pollution Severity: Critical Fix: npm update lodash axios@0.21.0 ā 1.6.0 CVE-2023-45857: SSRF vulnerability Severity: High Fix: npm update axios RECOMMENDED UPDATES: - react: 18.2.0 ā 18.3.0 (minor) - typescript: 5.0.0 ā 5.3.0 (minor) - next: 14.0.0 ā 14.1.0 (minor) ```
AI Agent Skills are reusable workflow packages that extend your AI coding assistant with multi-step capabilities. Install dependency-analyzer by following these steps.
.cursor/skills/ or .codex/skills/ directory