Stats
Actions
Tags
From codeforerunner
Run a security and dependency audit against a repository. Use when the user wants a security review, dependency vulnerability check, or supply-chain audit.
How this skill is triggered — by the user, by Claude, or both
Slash command
/codeforerunner:forerunner-auditThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Produces a structured security and dependency audit report. Covers known vulnerability patterns, dependency hygiene, secret exposure risks, and supply-chain concerns.
Produces a structured security and dependency audit report. Covers known vulnerability patterns, dependency hygiene, secret exposure risks, and supply-chain concerns.
User asks to: audit the repo, run a security check, check for vulnerabilities, review dependencies for security issues.
/forerunner-scan first)package.json, package-lock.json, yarn.lock, pyproject.toml, poetry.lock, requirements*.txt, go.mod, go.sum, Cargo.toml, Cargo.lock, Gemfile.lock.env.example or similar (never actual secret files)Run forerunner generate --prompt-only audit — outputs the assembled prompt bundle to stdout. Read this output and execute the documentation task it describes.
Without CLI, get the prompt from:
src/codeforerunner/prompts/tasks/audit.mdsrc/codeforerunner/prompts/system/base.mdStructured audit report covering: outdated/vulnerable dependencies, hardcoded secrets risk surface, CI security posture, supply-chain exposure. Severity-tagged findings (HIGH / MEDIUM / LOW). Write to docs/audit.md or return as Markdown.
npx claudepluginhub derek-palmer/codeforerunner --plugin codeforerunnerFetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.
Applies a firm's KYC/AML rules grid to parsed onboarding records: assigns risk rating, checks required documents, outputs rule outcomes with citations, and routes for escalation.
Generates daily or weekly digests of activity from connected sources (chat, email, docs, tasks, CRM), highlighting action items, decisions, mentions, and project updates.