# ns-audit-dependencies

> Claude/Codex skill by [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars · Updated 2026-09-16

Audits a local Node.js project dependency tree with NCM vulnerability data. Use when the user asks for an npm audit-style security review, package CVEs, direct/transitive vulnerability report, dependency risk assessment, or remediation plan before upgrading. For vulnerabilities actually loaded in running N|Solid processes, use ns-analyze-vulnerabilities instead.

## Install

```sh
git clone https://github.com/nodesource/nsolid-skills-plugin /tmp/nsolid-skills-plugin && ln -s /tmp/nsolid-skills-plugin/skills/ns-audit-dependencies ~/.claude/skills/ns-audit-dependencies
```

## From README

Run the audit If the prompt already contains host-provided audit data, use only that data. Treat it as complete only when it contains renderer-produced Markdown or an equivalent integrity-checked artifact. Otherwise, run the bundled helper from the project root using the absolute directory containing this SKILL.md: The helper requires HTTPS access to api.ncm.nodesource.com and writes the complete report under /.nsolid/assets/. Request escalation scoped to this command when the sandbox blocks either operation. It reports progress and recovery on stderr, saves the complete integrity-checked report itself, and emits a deterministic executive summary with the absolute report link on stdout. Poll the same session until it exits; do not start another audit or use model-driven per-package calls after the helper succeeds. If the helper reports AUDITREPORTRETRYREQUIRED, it deliberately saved no report because every package was unchecked solely by retryable transport failures.

## Links

- HTML page: https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-audit-dependencies/
- GitHub: https://github.com/nodesource/nsolid-skills-plugin
- Author: [@nodesource](https://omgskills.com/library/nodesource/index.md)

## More from this repo

- [ns-advanced-memory-leak-hunter](https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-advanced-memory-leak-hunter/index.md) — Performs an advanced N|Solid memory leak hunt comparing baseline vs peak heap evidence to isolate retained...
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars
- [ns-analyze-asset](https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-analyze-asset/index.md) — Analyzes an existing N|Solid diagnostic asset by asset ID or local asset path using asset-summary.
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars
- [ns-analyze-event](https://omgskills.com/library/nodesource/nsolid-skills-plugin/skills/ns-analyze-event/index.md) — Investigates an existing N|Solid event payload and correlates relevant MCP evidence.
   - [@nodesource](https://omgskills.com/library/nodesource/index.md) · 0 stars