Dependency Audit

Official Pro

Deep CVE analysis with actual usage path correlation

Cipher31 installs

What it does

Goes beyond `npm audit` — correlates CVEs with your actual code paths to separate real threats from noise.

Why you need it

Most dependency audits produce 100 warnings and 95 are false positives. This skill checks whether you actually USE the vulnerable code path, so you fix what matters.

Key capabilities

- npm, pip, gem, and cargo support - Usage-path correlation to reduce false positives - Fix suggestions with compatibility checks - Auto-PR generation for patches - SBOM (Software Bill of Materials) generation