Scans npm dependencies for known vulnerabilities using the npm audit JSON API and the OSV.dev REST API (api.osv.dev/v1/query). Cross-references findings with the GitHub Advisory Database (GHSA) for severity scoring.
Installs into .claude/skills of the current project.
Are you the author of Npm Package Vulnerability Scanner?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/agentskillexchange-npm-package-vulnerability-scanner)
---
name: "NPM Package Vulnerability Scanner"
slug: "npm-package-vulnerability-scanner"
description: "Scans npm dependencies for known vulnerabilities using the npm audit JSON API and the OSV.dev REST API (api.osv.dev/v1/query). Cross-references findings with the GitHub Advisory Database (GHSA) for severity scoring."
verification: "security_reviewed"
source: "https://docs.npmjs.com/cli/v10/commands/npm-audit/"
author: "npm, Inc."
category: "Library & API Reference"
framework: "Cursor"
---
# NPM Package Vulnerability Scanner
Scans npm dependencies for known vulnerabilities using the npm audit JSON API and the OSV.dev REST API (api.osv.dev/v1/query). Cross-references findings with the GitHub Advisory Database (GHSA) for severity scoring.
## Installation
Use the upstream install or setup path that matches your environment:
- npm-audit | npm Docs Skip to search Skip to content
- npm Docs
- npm package scope, access level, and visibility
- Docker and private modules
Requirements and caveats from upstream:
- Downloading and installing Node.js and npm
- Try the latest stable version of node
- Creating Node.js modules
Basic usage or getting-started notes:
- Creating a strong password
- Receiving a one-time password over email
- About two-factor authentication
- Source: https://docs.npmjs.com/cli/v10/commands/npm-audit/
## Documentation
- https://docs.npmjs.com/cli/v10/commands/npm-audit/
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/npm-package-vulnerability-scanner/)
