ns-audit-dependencies
Audits a local Node.js project dependency tree with NCM vulnerability data. Use when the user asks for an npm audit-style security review, package CVEs, direct/transitive vulnerability report, dependency risk assessment, or remediation plan before upgrading. For vulnerabilities actually loaded in running N|Solid processes, use ns-analyze-vulnerabilities instead.
Install
With your agent
Install OMGSkills skill "nodesource/nsolid-skills-plugin:skills/ns-audit-dependencies" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/nodesource/nsolid-skills-plugin /tmp/nsolid-skills-plugin && ln -s /tmp/nsolid-skills-plugin/skills/ns-audit-dependencies ~/.claude/skills/ns-audit-dependenciesFrom README
Run the audit If the prompt already contains host-provided audit data, use only that data. Treat it as complete only when it contains renderer-produced Markdown or an equivalent integrity-checked artifact. Otherwise, run the bundled helper from the project root using the absolute directory containing this SKILL.md: The helper requires HTTPS access to api.ncm.nodesource.com and writes the complete report under /.nsolid/assets/. Request escalation scoped to this command when the sandbox blocks either operation. It reports progress and recovery on stderr, saves the complete integrity-checked report itself, and emits a deterministic executive summary with the absolute report link on stdout. Poll the same session until it exits; do not start another audit or use model-driven per-package calls after the helper succeeds. If the helper reports AUDITREPORTRETRYREQUIRED, it deliberately saved no report because every package was unchecked solely by retryable transport failures.
More from this repo
ns-advanced-memory-leak-hunter
Performs an advanced N|Solid memory leak hunt comparing baseline vs peak heap evidence to isolate retained...
ns-analyze-asset
Analyzes an existing N|Solid diagnostic asset by asset ID or local asset path using asset-summary.
ns-analyze-event
Investigates an existing N|Solid event payload and correlates relevant MCP evidence.