You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
SkillScore95Maintained
Automatic
◆Security & AppSec pack
Last verified 8/29/2026
What it changes
Passed 21 of 22 test cases with the skill, and 16 of 22 without it.
Without skill73%
With skill95%
Checks it passed that the model alone missed
The response details outdated packages along with safe upgrade paths.
The response includes system-level base image OS packages in the vulnerability inventory.
The response directs the user to resources/implementation-playbook.md for execution playbooks.
and 2 more in the full report
5 fixed16 passed either way1 still failing0 broke
Pass-rate lift
+23 pp
Tokens
+3%
Agent turns
0%
Response time
-12%
Model gemini-3.6-flashMeasured 8/29/2026v121 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 5
Prompt
We need a standard operating procedure document to automate our Gradle dependency scanning pipeline in Jenkins. Which internal document provides this framework?
What was checked, without and with the skill
Checked
Without skill
With skill
The response directs the user to resources/implementation-playbook.md for execution playbooks.
Missed
Passed
case-16 · gemini-3.6-flash · 8/29/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md44 linessingle file
Dependency Audit and Security Analysis
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Use this skill when
Auditing dependencies for vulnerabilities
Checking license compliance or supply-chain risks
Identifying outdated packages and upgrade paths
Preparing security reports or remediation plans
Do not use this skill when
The project has no dependency manifests
You cannot change or update dependencies
The task is unrelated to dependency management
Context
The user needs comprehensive dependency analysis to identify security vulnerabilities, licensing conflicts, and maintenance risks in their project dependencies. Focus on actionable insights with automated fixes where possible.
Requirements
$ARGUMENTS
Instructions
Inventory direct and transitive dependencies.
Run vulnerability and license scans.
Prioritize fixes by severity and exposure.
Propose upgrades with compatibility notes.
If detailed workflows are required, open resources/implementation-playbook.md.
Safety
Do not publish sensitive vulnerability details to public channels.
Verify upgrades in staging before production rollout.
Resources
resources/implementation-playbook.md for detailed tooling and templates.
Orchestrates design workflows by routing work through brainstorming, multi-agent review, and execution readiness in the correct order. Prevents premature implementation, skipped validation, and unreviewed high-risk designs.