← All skills
dependency-auditor
45 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a coding skill usually runs build and test commands.
By UitbreidenOS/UitKit (GitHub) · coding · 14 stars · scanned at commit 5b6423f
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 132 places.
Show 17 more
- professional-stacks/fullstack_developer_stack/skills/dependency-auditor/SKILL.md, line 256
4. Run `npx license-checker` — Flags GPL-licensed package (incompatible with MIT project) - professional-stacks/fullstack_developer_stack/skills/dependency-auditor/SKILL.md, line 257
5. Run `npx depcheck` — Identifies `leftpad` in node_modules but not in package.json - README.md, line 36
npx uitkit add all - README.md, line 74
Every skill is validated with `claude plugin validate --strict`. Prefer npm? `npx uitkit add all` still works. - README.md, line 160
Claude Code is Anthropic's official command-line AI assistant for software development. It runs in your terminal or IDE (VS Code, JetBrains), reads your codebas - README.md, line 172
Run `npx uitkit add all` to install everything, or use the Claude Code plugin system: `/plugin marketplace add UitbreidenOS/UitKit` then `/plugin install uitkit - README.md, line 182
| SDR / Sales Rep | `npx uitkit add skill gtm/sdr-research-brief` | [Guide](guides/for-sdr.md) | - README.md, line 183
| Founder / CEO | `npx uitkit add skill gtm/founder-operating-system` | [Guide](guides/for-founder.md) | - README.md, line 184
| Product Manager | `npx uitkit add skill product/product-discovery` | [Guide](guides/for-product-manager.md) | - README.md, line 185
| DevOps / Platform Engineer | `npx uitkit add skill devops-infra/kubernetes-architect` | [Guide](guides/for-devops-engineer.md) | - README.md, line 186
| Content Marketer / SEO | `npx uitkit add skill marketing/seo-audit` | [Guide](guides/for-content-marketer.md) | - README.md, line 187
| Finance Analyst / CFO | `npx uitkit add skill finance/dcf-model` | [Guide](guides/for-finance-analyst.md) | - README.md, line 188
| Legal / Compliance Officer | `npx uitkit add skill legal/contract-review` | [Guide](guides/for-legal-compliance.md) | - README.md, line 189
| Growth Hacker / Performance Marketer | `npx uitkit add skill marketing/paid-ads` | [Guide](guides/for-growth-marketer.md) | - README.md, line 190
| Customer Success Manager | `npx uitkit add skill gtm/customer-success` | [Guide](guides/for-customer-success.md) | - README.md, line 191
| Recruiter / HR | `npx uitkit add skill small-business/hiring-pipeline` | [Guide](guides/for-recruiter.md) | - README.md, line 192
| UX Designer / Researcher | `npx uitkit add skill product/ux-research` | [Guide](guides/for-ux-designer.md) |
and 112 more places
Runs commands on your computer
The author does not mention this. It runs automatically when the plugin is installed. Expected for a coding skill.
Found in 12 places.
Show 9 more
- professional-stacks/fullstack_developer_stack/skills/dependency-auditor/SKILL.md, line 112
bundle audit - hooks/notification/sound-system.md, line 139
subprocess.Popen(["afplay", path], stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL) - hooks/notification/sound-system.md, line 159
subprocess.Popen( - hooks/notification/sound-system.md, line 160
player, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL - hooks/post-tool-use/telegram-pr-notify.md, line 52
remote = subprocess.check_output( - hooks/post-tool-use/telegram-pr-notify.md, line 54
stderr=subprocess.DEVNULL, text=True - hooks/post-tool-use/telegram-pr-notify.md, line 66
return subprocess.check_output( - hooks/post-tool-use/telegram-pr-notify.md, line 68
stderr=subprocess.DEVNULL, text=True - hooks/usage-tracker.sh, line 149
"git_branch": os.popen("git rev-parse --abbrev-ref HEAD 2>/dev/null").read().strip() or "unknown",
Sends data to these websites: splunk.company.com
The author does not mention this. It runs automatically when the plugin is installed.
Found in 43 places.
Show 17 more
- hooks/cost-cap-enforcer.sh, line 161
"WebFetch" | "WebSearch") - hooks/notification/de/ntfy-push.md, line 46
curl -s \ - hooks/notification/de/slack-notify.md, line 61
curl -s -X POST \ - hooks/notification/es/ntfy-push.md, line 46
curl -s \ - hooks/notification/es/slack-notify.md, line 61
curl -s -X POST \ - hooks/notification/fr/ntfy-push.md, line 46
curl -s \ - hooks/notification/fr/slack-notify.md, line 61
curl -s -X POST \ - hooks/notification/nl/ntfy-push.md, line 46
curl -s \ - hooks/notification/nl/slack-notify.md, line 61
curl -s -X POST \ - hooks/notification/ntfy-push.md, line 46
curl -s \ - hooks/notification/ntfy-push.sh, line 10
curl -s \ - hooks/notification/slack-notify.md, line 61
curl -s -X POST \ - hooks/notification/slack-notify.sh, line 19
curl -s -X POST -H "Content-Type: application/json" -d "$PAYLOAD" "$WEBHOOK" > /dev/null - hooks/permission/de/permission-denied-alert.md, line 96
curl -s -X POST -H 'Content-type: application/json' \ - hooks/permission/es/permission-denied-alert.md, line 96
curl -s -X POST -H 'Content-type: application/json' \ - hooks/permission/fr/permission-denied-alert.md, line 96
curl -s -X POST -H 'Content-type: application/json' \ - hooks/permission/nl/permission-denied-alert.md, line 96
curl -s -X POST -H 'Content-type: application/json' \
and 23 more places
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this. It runs automatically when the plugin is installed.
Found in 10 places.
Show 7 more
Changes files outside its own folder
The author does not mention this. It runs automatically when the plugin is installed.
Found in 233 places.
Show 17 more
- hooks/advanced/nl/prompt-hook-guard.md, line 59
"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to - hooks/advanced/prompt-hook-guard.md, line 59
"prompt": "You are a security gate for a developer's AI coding assistant. You will receive the name and input of a shell command that the assistant is about to - hooks/audit-logger.md, line 84
cp hooks/audit-logger.sh .claude/hooks/ - hooks/context/de/file-changed-reload.md, line 139
cp hooks/context/file-changed-reload.sh .claude/hooks/ - hooks/context/de/pre-compact-snapshot.md, line 90
cp hooks/context/pre-compact-snapshot.sh .claude/hooks/ - hooks/context/es/file-changed-reload.md, line 139
cp hooks/context/file-changed-reload.sh .claude/hooks/ - hooks/context/es/pre-compact-snapshot.md, line 90
cp hooks/context/pre-compact-snapshot.sh .claude/hooks/ - hooks/context/file-changed-reload.md, line 139
cp hooks/context/file-changed-reload.sh .claude/hooks/ - hooks/context/fr/file-changed-reload.md, line 139
cp hooks/context/file-changed-reload.sh .claude/hooks/ - hooks/context/fr/pre-compact-snapshot.md, line 90
cp hooks/context/pre-compact-snapshot.sh .claude/hooks/ - hooks/context/nl/file-changed-reload.md, line 139
cp hooks/context/file-changed-reload.sh .claude/hooks/ - hooks/context/nl/pre-compact-snapshot.md, line 90
cp hooks/context/pre-compact-snapshot.sh .claude/hooks/ - hooks/context/pre-compact-snapshot.md, line 90
cp hooks/context/pre-compact-snapshot.sh .claude/hooks/ - hooks/cost-cap-enforcer.md, line 110
cp hooks/cost-cap-enforcer.sh .claude/hooks/ - hooks/de/usage-tracker.md, line 86
cp hooks/usage-tracker.sh .claude/hooks/ - hooks/es/usage-tracker.md, line 86
cp hooks/usage-tracker.sh .claude/hooks/ - hooks/fr/usage-tracker.md, line 86
cp hooks/usage-tracker.sh .claude/hooks/
and 213 more places
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Other copies in this repository
UitbreidenOS/UitKit has 1 more folder with a skill named dependency-auditor. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'dependency-auditor' ] || [ -L ~/.agents/skills/'dependency-auditor' ]; then echo 'A skill folder named dependency-auditor already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/UitbreidenOS/UitKit' "$d" && git -C "$d" checkout --quiet '5b6423fe6699510797bc4314aa74c6a4f2258a1e' -- 'professional-stacks/fullstack_developer_stack/skills/dependency-auditor' && mkdir -p ~/.agents/skills && cp -R "$d"/'professional-stacks/fullstack_developer_stack/skills/dependency-auditor' ~/.agents/skills/'dependency-auditor' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'dependency-auditor' ~/.claude/skills/'dependency-auditor' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for UitbreidenOS/UitKit shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/UitbreidenOS/UitKit/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 5b6423f | 45 |