# ns-audit-dependencies

> Claude/Codex skill by [@nodesource](https://omgskills.com/library/nodesource/index.md) · 12 stars · Updated 2026-10-23

Audits a local Node.js project dependency tree with NCM vulnerability data. Use when the user asks for an npm audit-style security review, package CVEs, direct/transitive vulnerability report, dependency risk assessment, or remediation plan before upgrading. For vulnerabilities actually loaded in running N|Solid processes, use ns-analyze-vulnerabilities instead.

## Install

```sh
git clone https://github.com/nodesource/nsolid-plugin /tmp/nsolid-plugin && ln -s /tmp/nsolid-plugin/skills/ns-audit-dependencies ~/.claude/skills/ns-audit-dependencies
```

## From README

Run the audit If the prompt already contains host-provided audit data, use only that data. Treat it as complete only when it contains renderer-produced Markdown or an equivalent integrity-checked artifact. Otherwise, run the bundled helper from the project root using the absolute directory containing this SKILL.md: The helper requires HTTPS access to api.ncm.nodesource.com and writes the complete report under /.nsolid/assets/. Request escalation scoped to this command when the sandbox blocks either operation. It reports progress and recovery on stderr, saves the complete integrity-checked report itself, and emits a deterministic executive summary with the absolute report link on stdout. Poll the same session until it exits; do not start another audit or use model-driven per-package calls after the helper succeeds. If the helper reports AUDITREPORTRETRYREQUIRED, it deliberately saved no report because every package was unchecked solely by retryable transport failures.

## Links

- HTML page: https://omgskills.com/library/nodesource/nsolid-plugin/skills/ns-audit-dependencies/
- GitHub: https://github.com/nodesource/nsolid-plugin
- Author: [@nodesource](https://omgskills.com/library/nodesource/index.md)

## More from this repo

- [ns-analyze-tracing](https://omgskills.com/library/nodesource/nsolid-plugin/skills/ns-analyze-tracing/index.md) — Analyzes N|Solid/OpenTelemetry tracing evidence for request latency, HTTP errors, and service dependencies.
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 12 stars
- [ns-switch-org](https://omgskills.com/library/nodesource/nsolid-plugin/skills/ns-switch-org/index.md) — Switches which NodeSource organization nsolid-plugin is authenticated against.
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 12 stars
- [ns-memory-spike-analysis](https://omgskills.com/library/nodesource/nsolid-plugin/ns-memory-spike-analysis/index.md) — Diagnoses memory growth, heap spikes, RSS increases, OOMs, and suspected leaks in Node.js apps using supplied heap...
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 6 stars