nomad3/dep-audit
apps/api/app/skills/_bundled/dep-audit/SKILL.md
--- name: dep-audit engine: markdown version: 1 category: devops tags: [dependencies, security, cve, audit, packages] auto_trigger: "Use when auditing dependencies for security vulnerabilities or outdated packages" source_repo: https://github.com/angakh/claude-skills-starter --- ## Description Check for outdated packages and known security vulnerabilities in Python and Node.js project dependencies. # Dependency Audit ## Overview Check for outdated packages and known security vulnerabilities
$ install --global
skillsauthnpx skillsauth add nomad3/servicetsunami-agents dep-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 12, 2026, 7:00 AM145.9s1 file scanned
SKILL.md
- name:
- dep-audit
- engine:
- markdown
- version:
- 1
- category:
- devops
- tags:
- [dependencies, security, cve, audit, packages]
- auto_trigger:
- Use when auditing dependencies for security vulnerabilities or outdated packages
- source_repo:
- https://github.com/angakh/claude-skills-starter
Description
Check for outdated packages and known security vulnerabilities in Python and Node.js project dependencies.
Dependency Audit
Overview
Check for outdated packages and known security vulnerabilities in project dependencies.
Announce at start: "Running dependency audit."
Python Projects
Outdated packages
pip list --outdated
Security vulnerabilities
pip-audit # preferred
# fallback:
safety check --json
If pip-audit not installed: pip install pip-audit first.
Summarize findings:
- Packages with CVEs: name, version, CVE ID, severity
- Packages more than 2 major versions behind: flag as upgrade candidates
Node.js Projects
Security audit
npm audit --json
Outdated packages
npm outdated
Summarize findings:
- Critical/high vulnerabilities: package, vulnerability, fix version
- Outdated packages: current vs latest
Output Format
Group by severity:
- Critical/High: require immediate action — include CVE, affected version, fix
- Medium: should fix before next release
- Low/Info: informational
Recommend: npm audit fix or pip install --upgrade <package> for auto-fixable issues.
Related Skills
nomad3/Simon's Today Planner
tools
VerifiedTrustedCommunity
--- name: Simon's Today Planner engine: markdown category: productivity tags: [orchestration, today-planner, morning-briefing, context-engineering] version: 1 tool_groups: [github, knowledge_readonly, gmail, calendar] inputs: - name: time type: string description: Current time/date context default: "morning" auto_trigger: "/today, morning briefing, daily plan, what's on for today" --- # /today — Simon's Daily Orchestrator You are Simon's Chief of Staff. Your goal is to apply "Con
1SKILL.mdUpdated Jun 15, 2026
nomad3/Luna DeskMate Mode
tools
VerifiedTrustedCommunity
--- name: Luna DeskMate Mode engine: markdown category: presence tags: [deskmate, focus-mode, quiet-presence, calm-co-worker] version: 1 tool_groups: [gmail, calendar, knowledge_readonly] inputs: - name: focus_duration type: integer description: How many minutes to stay in DeskMate mode default: 60 auto_trigger: "luna deskmate, focus mode, quiet presence, deskmate mode" --- # Luna DeskMate Mode — The Calm Co-worker You are Simon's "Embodied AI Co-worker," inspired by the Loona De
1SKILL.mdUpdated Jun 15, 2026
nomad3/Levi MDM PC9 Triage
development
VerifiedTrustedCommunity
--- name: Levi MDM PC9 Triage engine: agent avatar: /assets/agents/luna-photoreal.jpg category: support tags: [levi, mdm, triage, critical, pc9] --- # Levi MDM PC9 Triage Agent You are the critical triage specialist for Levi's MDM systems, specifically focusing on PC9 and product data integrity. ## Your Focus - Handling high-priority incidents (like IT75404). - Ensuring data consistency across the MDM pipeline. - Rapid response to critical platform outages.
1SKILL.mdUpdated Jun 15, 2026
nomad3/Levi SRE Platform
development
VerifiedTrustedCommunity
--- name: Levi SRE Platform engine: agent avatar: /assets/agents/luna-photoreal.jpg category: support tags: [levi, sre, platform, management] --- # Levi SRE Platform Agent You are the SRE Platform Manager for Levi's. You focus on the core SRE platform, MDM systems, and high-level service level objectives. ## Your Focus - Overseeing the Levi's SRE platform infrastructure. - Managing Master Data Management (MDM) reliability. - Coordinating seasonal peaks and platform availability.
1SKILL.mdUpdated Jun 15, 2026