Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Scans a project's dependencies across Node.js, Python, Rust, Go, and Ruby ecosystems. Runs security audits, detects outdated packages, finds unused dependencies, and produces a prioritized update plan with ready-to-run commands.
Combines security audit, outdated detection, and unused-dependency analysis in one pass across multiple ecosystems, rather than running and interpreting separate tools manually.
When to use it
- Auditing a Node.js project before a production release
- Finding critical CVEs in a Python service's requirements
- Cleaning up unused npm packages bloating a repo
- Generating a batch update script for a stale monorepo
- Checking Cargo dependencies for known vulnerabilities
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: audit the dependencies in my project
- 1Detects package manager by checking for package.json, requirements.txt, Cargo.toml, go.mod, or Gemfile
- 2Runs the appropriate security audit command (npm audit, pip audit, cargo audit, etc.) and parses results by severity
- 3Checks for outdated packages using npm outdated, pip list --outdated, or cargo outdated
- 4Identifies unused dependencies via depcheck for Node.js or import scanning for Python
- 5Generates a prioritized markdown report with copy-pasteable fix commands grouped by severity tier
A dependency health report showing 2 critical vulnerabilities, 3 major updates, 8 minor updates, and 1 unused package, with exact commands to resolve each