wehub-resource-sync
1 line
1.5 KiB
JSON
1 line
1.5 KiB
JSON
{"content": "---\nallowed-tools: Read, Bash, Grep\nargument-hint: [scope] | --security | --licenses | --updates | --all\ndescription: Audit dependencies for security vulnerabilities, license compliance, and update recommendations\n---\n\n# Dependency Audit\n\nAudit dependencies for security vulnerabilities and compliance: **$ARGUMENTS**\n\n## Current Dependencies\n\n- Package files: @package.json or @requirements.txt or @Cargo.toml or @pom.xml\n- Lock files: @package-lock.json or @poetry.lock or @Cargo.lock\n- Security scan: !`npm audit --audit-level=moderate 2>/dev/null || pip check 2>/dev/null || cargo audit 2>/dev/null || echo \"No security scanner available\"`\n- Outdated packages: !`npm outdated 2>/dev/null || pip list --outdated 2>/dev/null || echo \"Check manually\"`\n\n## Task\n\nPerform comprehensive dependency security and compliance audit:\n\n**Audit Scope**: Use $ARGUMENTS to focus on security, licenses, updates, or complete audit\n\n**Analysis Areas**:\n1. **Vulnerability Scanning** - Known CVEs, security advisories, exploit availability\n2. **Version Analysis** - Outdated packages, breaking changes, update recommendations\n3. **License Compliance** - License compatibility, restrictions, legal obligations\n4. **Supply Chain Security** - Package authenticity, maintainer status, suspicious dependencies\n5. **Performance Impact** - Bundle size, unused dependencies, optimization opportunities\n\n**Output**: Prioritized security report with critical vulnerabilities, recommended actions, and compliance status.\n"} |