Dependency Audit

Goes beyond `npm audit` — correlates CVEs with your actual code paths to separate real threats from noise.

Most dependency audits produce 100 warnings and 95 are false positives. This skill checks whether you actually USE the vulnerable code path, so you fix what matters.

- npm, pip, gem, and cargo support - Usage-path correlation to reduce false positives - Fix suggestions with compatibility checks - Auto-PR generation for patches - SBOM (Software Bill of Materials) generation