Audit and fix accessibility issues across the portfolio to ensure WCAG 2.1 AA compliance.
中文简介正在准备中。当前显示原文说明。
PP-Namias/Portfolio22026年10月16日 更新
免费在 GitHub 公开
dependency-audit
Audit dependencies for security vulnerabilities, licensing, and maintenance.
中文简介正在准备中。当前显示原文说明。
查看安装方法包含的文件（1）
- SKILL.md1.6 KB
SKILL.md（原文）
安装前可以查看交给 AI 代理的指令内容。
Dependency Audit Skill
Audit project dependencies for security vulnerabilities, licensing issues, and maintenance status.
When to use this skill
- Regular security audits
- Before deploying to production
- When adding new dependencies
- Investigating vulnerability reports
- Updating outdated packages
Workflow
- Run audit tools — npm audit, license-checker
- Analyze results — Identify critical vulnerabilities
- Research fixes — Find updates or alternatives
- Test updates — Ensure compatibility
- Document decisions — Record audit findings
Audit Commands
# Security audit
npm audit
npm audit --json
# License audit
npx license-checker --summary
npx license-checker --failOn "GPL-3.0"
# Outdated packages
npm outdated
npx npm-check-updates
# Bundle analysis
npx webpack-bundle-analyzer stats.json
Vulnerability Severity
| Severity | Action |
|---|---|
| Critical | Fix immediately |
| High | Fix within 24 hours |
| Moderate | Fix within 1 week |
| Low | Plan for next sprint |
Common Vulnerabilities
- prototype pollution — Use Object.create(null) or Map
- SQL injection — Use parameterized queries
- XSS — Sanitize user input
- CSRF — Use CSRF tokens
- Dependency confusion — Use scoped packages
Checklist
- npm audit passes with no critical vulnerabilities
- All licenses are compatible
- No deprecated packages in use
- Dependencies are up-to-date
- Bundle size is acceptable
评价
还没有评价。欢迎分享你的使用感受。
评论
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
同一仓库的技能
Creates a new blog post document in the Sanity studio. Use when the user wants to write a blog post, publish an article, or schedule a future post.
中文简介正在准备中。当前显示原文说明。
PP-Namias/Portfolio22026年10月16日 更新
Creates a new certification document in the Sanity studio. Use when the user wants to add a credential, certificate, or professional accreditation to the Certifications collection.
中文简介正在准备中。当前显示原文说明。
PP-Namias/Portfolio22026年10月16日 更新
Adds a new skill MD file to the studio's skills collection. Use when the user wants to author a new step-by-step recipe for the studio's in-app Skills tool or the .agents mirror.
中文简介正在准备中。当前显示原文说明。
PP-Namias/Portfolio22026年10月16日 更新
Creates a new project document in the Sanity studio. Use when the user wants to add a new portfolio project, a case study, or a work sample to the Projects collection.
中文简介正在准备中。当前显示原文说明。
PP-Namias/Portfolio22026年10月16日 更新
Creates a new experience document in the Sanity studio. Use when the user wants to add a job, role, internship, or work history entry to the Experience collection.
中文简介正在准备中。当前显示原文说明。
PP-Namias/Portfolio22026年10月16日 更新