{"slug":"jeremylongshore-auditing-python-dependencies","source_name":"jeremylongshore/auditing-python-dependencies","name":"Jeremylongshore/Auditing Python Dependencies","description":"Audit a Python project's installed dependencies for known CVEs by\nwrapping pip-audit (PyPA's official vulnerability auditor) and\nemitting findings in the canonical penetration-tester schema.\nDetects vulnerable direct AND transitive packages, normalizes\npip-audit's severity output via OSV severity bands, falls back to\npip list --outdated when pip-audit isn't installed, and supports\nrequirements.txt, pyproject.toml (PEP 621), Pipfile.lock, and\npoetry.lock as input sources.\nUse when: pre-merge gate","version":1,"lift":{"pass_rate_delta_pts":54.55,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":51.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-13T03:11:02.799667+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":54.55,"with_pass_pct":86.4,"without_pass_pct":31.8,"tokens_delta_pct":51.1,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":21,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-13T03:11:02.799667+00:00","run_id":"c5d515f2-79ea-4ede-b1e1-08ce205e0d88","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"327d31b09584408332ee0d82771630e486fb6576dae3b7230dced0738fe6b390","raw_url":"https://app.decimal.ai/s/jeremylongshore-auditing-python-dependencies/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/jeremylongshore-auditing-python-dependencies"}