dep-security-audit - Audit C++ and Rust dependency security
Guide security audits of C++ and Rust dependencies, including vulnerability, trustworthiness, supply chain, license, and version management reviews.
Tags
Updated: 2026-09-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Inventory project dependencies
- Scan known vulnerabilities
- Assess dependency trustworthiness
- Evaluate supply chain risks
- Check license compliance
- Review dependency necessity
- Establish version policies
- Recommend security controls
- Create audit reports
- Plan remediation actions
Inputs
- Cargo.toml
- Cargo.lock
- CMakeLists.txt
- vcpkg.json
- conanfile.txt
- Dependency repositories
- Package manager metadata
- Vulnerability databases
- audit-template.md
Outputs
- Dependency audit report
- Software Bill of Materials
- Vulnerability findings
- Risk assessments
- License compliance status
- Remediation recommendations
- Dependency security posture