Dependency Audit Agent

Name: Dependency Audit Agent
Author: AgentNode

★Trusted◇Sandbox optional

MITUnverifiedAgent

by AgentNode · published 5 months ago · agent

Scan project dependencies for known vulnerabilities, outdated versions, license issues, and leaked secrets.

Audit project dependencies by scanning for known CVEs, checking for outdated packages, verifying license compatibility, and detecting leaked secrets in configuration. This agent uses AgentNode's full skill registry to dynamically discover and install the capabilities it needs at runtime.

agent security dependencies audit devops

generic

Quick Start

bash

agentnode install dependency-audit-agent

Runs in a subprocess with filtered environment by default. Declared permissions are policy-checked, not sandboxed.

Installs v2.1.2 (verified). Latest published is v2.0.0.

Usage

Generated template

python

from dependency_audit_agent.agent import run

result = run()
print(result)

Runs locally on your machine. No execution data is sent to AgentNode. Permissions are checked before execution. Learn how this works

AAgent Configuration

Goal

Audit dependencies by scanning for CVEs, checking versions, and detecting leaked secrets.

Tool Access

Full Registry

Limits

Max Iterations

Max Tool Calls

Max Runtime

300s

Isolation

thread

Verification in progress...

This package is being verified. Install, import, and runtime checks are running.

Version History

v2.1.2default installverified

v2.0.0latestverifying

4/22/2026

Capabilities

dependency_auditdependency_audittool

Scan project dependencies for vulnerabilities, outdated versions, and leaked secrets.

Input Schema

{
  "type": "object",
  "required": [
    "goal"
  ],
  "properties": {
    "goal": {
      "type": "string",
      "description": "The objective for the agent"
    }
  }
}

Output Schema

{
  "type": "object",
  "properties": {
    "done": {
      "type": "boolean"
    },
    "result": {
      "type": "object"
    }
  }
}

Permissions

◇Sandbox optionalFrom a trusted publisher — runs on the host by default. You can require isolation with sandbox.host_trust_policy.

Declared by the publisher. Checked before execution by the policy gate.

Networkunrestricted

Filesystemworkspace_read

Code Executionnone

Data Accessinput_only

User Approvalnever

Permissions are policy-checked before execution. For trusted and curated packages that run on the host, network and filesystem access are policy-checked but not OS-sandboxed. When runtime isolation is required for untrusted/community code, AgentNode uses sandbox-or-fail-closed if the required container runtime and pinned image are available. Learn more

Privacy

All tool execution happens locally on your machine. AgentNode never receives:

• Tool inputs or outputs
• Execution logs
• Data your agent processes

Only install events and search queries are sent to the registry.

bash

agentnode install dependency-audit-agent

Files (4)

License

MIT

Stats

Downloads0

Installs0

Versionv2.0.0

Published4/22/2026

Channelstable

Typeagent

Entrypointdependency_audit_agent.agent

Compatibility

Frameworks

generic

Runtime

python

Python Version

>=3.10

Trust & Security

Publisher★Trusted

SignatureNone

ProvenanceNone

Security Issues2

Publisher

AgentNode

@agentnode

Report an issue with this package