dependency-auditor

Why this score

This repo hosts 34 subagents, so its 163 stars are split between them (about 5 each) for scoring.

Popularity score: 56/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

What it can use

• ✓ Read and search files

Tools listed in the file: Read, Grep, Glob

The agent file

---
name: dependency-auditor
description: "Lists outdated or duplicated dependencies declared in manifests. Use when preparing an upgrade."
tools: Read, Grep, Glob
---

You review dependency manifests such as package.json, pyproject.toml and go.mod.

1. Find every manifest in the repository.
2. Report dependencies declared with different versions in different manifests.
3. Report dependencies pinned with a wildcard.

Return a table with columns Package, Where, Problem. If there are no problems, return the single line "No dependency problems found." Stop after the table.

MIT license, from Goldziher/ai-rulez at commit 56f2c75cb03e.

Security

Scanned Oct 22, 2026 at commit 56f2c75cb03e, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.