node-security-audit
Audits and remediates Node.js runtime, npm/pnpm/yarn dependency, and GitHub Actions supply-chain vulnerabilities across local and remote GitHub repositories, while respecting repository-specific version-pinning tests and CI guardrails. Use when reviewing Node or Astro/Vite/Starlight apps for CVEs, running fleet-wide security sweeps across ~/projects or GitHub repos, or upgrading pinned dependencies safely.
- Version
- 1.0.0
- License
- Apache-2.0
Pinned to revision eb4bfcd2fdef, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/node-security-audit/SKILL.md
- skills/node-security-audit/references/remediation-playbook.md
- skills/node-security-audit/scripts/audit-repo.mjs
- skills/node-security-audit/scripts/discover-node-repos.sh
- skills/node-security-audit/scripts/scan-remote-repos.mjs
Every link opens the file at its source, pinned to the revision this page describes.