# Dependency Check

> Dependency Check is an Agent Skill for devops & security published in the ruvnet/ruflo repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Scan project dependencies for known vulnerabilities and CVEs. Use when auditing third-party packages, before releases, after `npm install`/lockfile changes, or when investigating reported CVE advisories.

- Skill name: `dependency-check`
- Category: [DevOps & Security](https://www.openparable.com/skill/devops-security/1)
- Source: https://github.com/ruvnet/ruflo/blob/HEAD/plugins/ruflo-security-audit/skills/dependency-check/SKILL.md
- Repository: ruvnet/ruflo (64,547 GitHub stars when collected)

## SKILL.md

Check dependencies for CVEs and outdated packages:

```bash
npx @claude-flow/cli@latest security cve --list
npx @claude-flow/cli@latest security cve --severity critical
npx @claude-flow/cli@latest security scan --type deps --depth deep
npm audit --json
```

| Severity | Action |
|----------|--------|
| critical | Block deployment, fix immediately |
| high | Fix before next release |
| moderate | Schedule fix within sprint |
| low | Track in backlog |

Auto-fix via the scan command: `npx @claude-flow/cli@latest security scan --type deps --fix`

For continuous monitoring, dispatch via MCP:
`mcp__claude-flow__hooks_worker-dispatch({ trigger: "audit" })`

---

Source: https://www.openparable.com/skill/devops-security/dependency-check (OpenParable). Cite the canonical URL above.