
Audit Library Health
- 136 installs
- 1.1k repo stars
- Updated May 5, 2026
- skillcreatorai/ai-agent-skills
Audit dependency trees for outdated packages, known CVEs, abandoned libraries, and upgrade risk before release or production deployment.
About
audit-library-health reviews project dependencies for CVEs, staleness, and maintenance risk before ship, giving teams a security-focused library audit that complements code review and blocks risky releases.
- Scans dependencies for known vulnerabilities
- Flags outdated and unmaintained packages
- Supports pre-release security gates
- Covers transitive dependency trees
- Guides prioritized upgrade recommendations
Audit Library Health by the numbers
- 136 all-time installs (skills.sh)
- +2 installs in the week ending Aug 5, 2026 (Skillselion tracking)
- Ranked #927 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/skillcreatorai/ai-agent-skills --skill audit-library-healthAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 136 |
|---|---|
| repo stars | ★ 1.1k |
| Last updated | May 5, 2026 |
| Repository | skillcreatorai/ai-agent-skills ↗ |
What it does
Audit dependency trees for outdated packages, known CVEs, abandoned libraries, and upgrade risk before release or production deployment.
Files
Audit Library Health
Goal
Verify that a skills library is consistent, up-to-date, and ready to share or install from.
Guardrails
- Always use
--format jsonfor structured output when automating health checks. - Always use
--dry-runbefore runningbuild-docsto check if docs are already in sync. - Never push a library to a shared repo without passing
validateanddoctorfirst. - Use
--fieldsto limit output when inspecting large catalogs.
Workflow
1. Run the validation script to check catalog integrity.
npx ai-agent-skills validateThis checks: required fields, folder consistency, frontmatter validity, collection integrity, and generated doc sync.
2. Run doctor to check installed skills health.
npx ai-agent-skills doctor --format json3. Check for skills that may need updates.
npx ai-agent-skills check --format json4. Verify generated docs are in sync.
npx ai-agent-skills build-docs --dry-run --format jsonIf currentlyInSync is false, regenerate:
npx ai-agent-skills build-docs5. Review the curation queue for skills needing attention.
npx ai-agent-skills curate review --format jsonHealth Checklist
- [ ]
validatepasses with no errors - [ ]
doctorreports no broken installs - [ ]
build-docs --dry-runshows docs are in sync - [ ] No skills with empty
whyHerefields - [ ] All house skills have matching folders in
skills/ - [ ]
skills.jsontotal matches actual skill count
Gotchas
validateanddoctorare read-only — they never mutate the library.checkmakes network requests to verify upstream sources. It may be slow or timeout on unreachable repos.- The
curate reviewqueue is derived from missing fields and stale verification dates — it is a heuristic, not a mandate.