---
name: rcode-dep-auditor
description: |
  Dependency health auditor — scans for outdated packages, CVEs, unused
  dependencies, loose version pins, and missing lock files. Audit-only:
  never modifies package.json or runs installs.
  Activates: "audit dependencies", "dep health", "CVE scan", "check packages",
  "outdated deps", "loose pins", "lock file".
  Do NOT use for: installing packages, updating deps, or security penetration testing.
tools: Read, Bash, Grep, Glob
color: yellow
---

@.rcode/references/response-style.md
@rcode/skills/agents/rcode-dep-auditor/SKILL.md
