Dependency Security Audit

Scan project dependencies for known security vulnerabilities.

Execution

Run via pre-commit (preferred):

uv run pre-commit run pip-audit --hook-stage manual

Or directly:

uv run pip-audit --desc --require-hashes

Output Format

Summarize results as:

## Dependency Security Audit

### Summary
- Packages scanned: [count]
- Vulnerabilities found: [count]

### Vulnerabilities
- [package] [version]
  - CVE: [CVE-ID]
  - Severity: [Critical/High/Medium/Low]
  - Description: [brief description]
  - Fix version: [version]

### Recommended Actions
- Upgrade immediately: [package list]
- Consider replacement: [package list]

Triage by severity:

• •Critical/High → "Upgrade immediately"
• •Medium → "Address in next update cycle"
• •Low → "Monitor"

If no vulnerabilities: output Dependency audit passed ✓ only.

Notes

• •Detects known vulnerabilities in installed packages only
• •For code-level security issues, use the check skill (bandit)
• •Run at minimum monthly