From ruflo-security-audit
Scan project dependencies for known vulnerabilities and CVEs
How this skill is triggered — by the user, by Claude, or both
Slash command
/ruflo-security-audit:dependency-check [--path PATH][--path PATH]This skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Check dependencies for CVEs and outdated packages:
Check dependencies for CVEs and outdated packages:
npx @claude-flow/cli@latest security cve --check
npx @claude-flow/cli@latest security audit --include-dev
npm audit --json
| Severity | Action |
|---|---|
| critical | Block deployment, fix immediately |
| high | Fix before next release |
| moderate | Schedule fix within sprint |
| low | Track in backlog |
Auto-fix: npx @claude-flow/cli@latest security cve --fix
For continuous monitoring, dispatch via MCP:
mcp__claude-flow__hooks_worker-dispatch({ trigger: "audit" })
Blocks Edit/Write/Bash actions until Claude investigates importers, data schemas, and user instructions. Improves output quality by forcing concrete facts before edits.
3plugins reuse this skill
First indexed May 13, 2026
npx claudepluginhub digitalcrest01/ruflow --plugin ruflo-security-audit