Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
skillcreatorai avatar

Audit Library Health

  • 136 installs
  • 1.1k repo stars
  • Updated May 5, 2026
  • skillcreatorai/ai-agent-skills

Audit dependency trees for outdated packages, known CVEs, abandoned libraries, and upgrade risk before release or production deployment.

About

audit-library-health reviews project dependencies for CVEs, staleness, and maintenance risk before ship, giving teams a security-focused library audit that complements code review and blocks risky releases.

  • Scans dependencies for known vulnerabilities
  • Flags outdated and unmaintained packages
  • Supports pre-release security gates
  • Covers transitive dependency trees
  • Guides prioritized upgrade recommendations

Audit Library Health by the numbers

  • 136 all-time installs (skills.sh)
  • +2 installs in the week ending Aug 5, 2026 (Skillselion tracking)
  • Ranked #927 of 2,203 Security skills by installs in the Skillselion catalog
  • Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/skillcreatorai/ai-agent-skills --skill audit-library-health

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs136
repo stars1.1k
Last updatedMay 5, 2026
Repositoryskillcreatorai/ai-agent-skills

What it does

Audit dependency trees for outdated packages, known CVEs, abandoned libraries, and upgrade risk before release or production deployment.

Files

SKILL.mdMarkdownGitHub ↗

Audit Library Health

Goal

Verify that a skills library is consistent, up-to-date, and ready to share or install from.

Guardrails

  • Always use --format json for structured output when automating health checks.
  • Always use --dry-run before running build-docs to check if docs are already in sync.
  • Never push a library to a shared repo without passing validate and doctor first.
  • Use --fields to limit output when inspecting large catalogs.

Workflow

1. Run the validation script to check catalog integrity.

npx ai-agent-skills validate

This checks: required fields, folder consistency, frontmatter validity, collection integrity, and generated doc sync.

2. Run doctor to check installed skills health.

npx ai-agent-skills doctor --format json

3. Check for skills that may need updates.

npx ai-agent-skills check --format json

4. Verify generated docs are in sync.

npx ai-agent-skills build-docs --dry-run --format json

If currentlyInSync is false, regenerate:

npx ai-agent-skills build-docs

5. Review the curation queue for skills needing attention.

npx ai-agent-skills curate review --format json

Health Checklist

  • [ ] validate passes with no errors
  • [ ] doctor reports no broken installs
  • [ ] build-docs --dry-run shows docs are in sync
  • [ ] No skills with empty whyHere fields
  • [ ] All house skills have matching folders in skills/
  • [ ] skills.json total matches actual skill count

Gotchas

  • validate and doctor are read-only — they never mutate the library.
  • check makes network requests to verify upstream sources. It may be slow or timeout on unreachable repos.
  • The curate review queue is derived from missing fields and stale verification dates — it is a heuristic, not a mandate.

Related skills

Securityauditappsec

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.