Installs into .claude/skills of the current project.
Are you the author of Dependency Advisory Audit?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/mesteriis-dependency-advisory-audit)
---
name: dependency-advisory-audit
description: "Triages CVEs and advisories for affected versions, reachability, exploitability, upgrades, and validation."
---
# Dependency Advisory Audit
Triage advisories against actual repository usage.
## Workflow
1. Identify package manager and lockfiles.
2. Verify installed/requested versions from files, not memory.
3. Locate actual imports, execution paths, and exposed surfaces.
4. Determine whether the advisory is reachable in this repo.
5. Recommend upgrade, patch, config mitigation, or non-applicability.
6. Define validation commands.
## Output
- package and version evidence
- advisory summary
- reachability analysis
- impact and confidence
- remediation options
- validation plan
## Rules
- Do not invent CVE details.
- Browse or use official/advisory sources when advisory facts are not provided.
- Do not upgrade packages without explicit implementation scope.
