dependency-auditorDependency Auditor
Install via ClawdBot CLI:
clawdbot install alirezarezvani/dependency-auditorGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://github.com/example/sample-web-app.gitAI Analysis
The skill definition describes legitimate dependency auditing functionality with no evidence of credential harvesting, data exfiltration, or hidden malicious instructions. The identified signals relate to common development tools (git clone) and shell usage typical for dependency analysis, not malicious behavior.
Audited Apr 17, 2026 · audit v1.0
Generated Mar 20, 2026
A software foundation developing an open-source library needs to ensure all dependencies have permissive licenses compatible with their MIT license. The skill scans package manifests, identifies GPL-licensed transitive dependencies, and flags license conflicts to prevent legal risks before public release.
A financial services company maintains a large Node.js microservices application. The skill scans dependencies across services, matches CVEs with CVSS scores, and prioritizes patches for high-risk vulnerabilities in production dependencies, enabling focused security updates.
An e-commerce platform built with Python and JavaScript has slowed due to bloated dependencies. The skill analyzes unused imports and redundant packages, identifying opportunities to remove 20+ unnecessary dependencies, improving build times and reducing attack surface.
A SaaS startup using Rust and Go needs to update dependencies without breaking APIs. The skill analyzes semantic versioning, predicts breaking changes in major updates, and suggests safe incremental upgrade paths to maintain service reliability during updates.
Offer a free tier for basic vulnerability scanning on public repositories, with paid plans for private repos, advanced features like license compliance, and team collaboration tools. Revenue comes from monthly subscriptions based on scan frequency and repository count.
Sell annual enterprise licenses with on-premise deployment, custom vulnerability databases, and integration into existing CI/CD pipelines. Include premium support, SLA guarantees, and compliance reporting for regulated industries like finance and healthcare.
Provide audit services where teams use the skill to analyze client projects, generate detailed reports, and offer remediation consulting. Bundle with ongoing monitoring and alerting for dependency risks, targeting organizations without in-house expertise.
💬 Integration Tip
Integrate into CI/CD pipelines to automatically scan dependencies on each commit, using webhooks to alert teams about new vulnerabilities or license issues in real-time.
Scored Apr 19, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.
Use when writing tests, creating test strategies, or building automation frameworks. Invoke for unit tests, integration tests, E2E, coverage analysis, performance testing, security testing.