Dependency Auditor

useai-pro

Audit npm, pip, and Go dependencies that OpenClaw skills try to install. Checks for known vulnerabilities, typosquatting, and malicious packages.

Install

The individual skill folder is not confirmed. This command opens the repository’s skill selector; follow the upstream instructions.

skills CLI

npx skills add UseAI-pro/openclaw-skills-security

Dependency AuditoralirezarezvaniCheck dependencies for known vulnerabilities using npm audit, pip-audit, etc. Use when package.json or requirements.txt changes, or before deployments. Alerts on vulnerable dependencies. Triggers on dependency file changes, deployment prep, security mentions.Security783 Repository stars
Trail of Bits SkillsTrail of BitsCollectionTrail of Bits plugin marketplace of skills for security research, vulnerability detection and audit workflows; Codex can load it through Claude marketplace compatibility.Security95 skills7.7k Repository stars
Author ContributionsMicrosoftOfficialIdentify all files a specific author contributed to on a branch vs its upstream, tracing code through renames. Use when asked who edited what, what code an author contributed, or to audit authorship before a merge. This skill should be run as a subagent — it performs many git operations and returns a concise table.Security194.2k Repository stars
Memory Leak AuditMicrosoftOfficialAudit code for memory leaks and disposable issues. Use when reviewing event listeners, DOM handlers, lifecycle callbacks, or fixing leak reports. Covers addDisposableListener, Event.once, MutableDisposable, DisposableStore, and onWillDispose patterns.Security194.2k Repository stars
Next Bundle OptimizerVercelOfficialAudit and reduce Next.js browser initial-load work. Use for slow route startup, oversized client bundles, duplicate browser dependencies, or features that can wait for interaction.Security143.1k Repository stars
Next Partial Prefetching AdoptionVercelOfficialTurn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the `partialPrefetching` flag, opt routes in with `export const prefetch = 'partial'`, audit `Link prefetch={true}` behavior, preserve existing prefetched UI with `instant()` tests, or resolve the instant-link-prefetch-partial and…Security143.1k Repository stars

Install

Related