Audit Dependencies

SkillDev tools

Dependency audit across the service repositories.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Audit Dependencies skill

What this skill tells your AI

The instructions your AI receives, as published by stbenjam/skillsaw in tests/fixtures/large-skill-library/skills/audit-dependencies/SKILL.md and read by ahel’s review.

Reports which services pull a vulnerable or unmaintained dependency, and which of those are reachable from a request path.

Running the audit

depaudit scan --org platform writes one JSON report per repository. The shape of that report is documented in the report schema.

Reading the results

Reachability matters more than the raw CVE count. A vulnerable parser that runs only in a build script is not the same risk as one in the request path — see the triage rubric.

File one issue per reachable finding, using the issue template.

Signals

GitHub stars
66
Forks
15
Last commit
Sep 2026
Advanced
Catalog kind
skill
Gateway key
audit-dependencies
Source
github.com/stbenjam/skillsaw