[skill]
name = "dependency-audit"
description = "Check project dependencies for known vulnerabilities and outdated packages"
version = "0.1.0"
author = "openjarvis"

[[skill.steps]]
tool_name = "file_read"
arguments_template = '{"path": "{project_path}/pyproject.toml"}'
output_key = "project_config"

[[skill.steps]]
tool_name = "think"
arguments_template = '{"thought": "Extract all dependencies and their version constraints from the project config: {project_config}"}'
output_key = "dependencies"

[[skill.steps]]
tool_name = "web_search"
arguments_template = '{"query": "python package vulnerability advisory {dependencies}"}'
output_key = "advisories"

[[skill.steps]]
tool_name = "think"
arguments_template = '{"thought": "Cross-reference dependencies with advisories and generate an audit report with risk levels and upgrade recommendations: {advisories}"}'
output_key = "report"
