agentaudit

---
name: agentaudit-skill
description: Automatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
---

## 📋 Metadata

**Version**: 3.0
**Author**: starbuck100
**Homepage**: https://agentaudit.dev
**Repository**: https://github.com/starbuck100/agentaudit-skill

**Compatibility**: Node.js 18+ (cross-platform) **or** bash + curl + jq (Unix). Internet access required for registry lookups.

**Platforms**: Claude Code, Cursor, Windsurf, GitHub Copilot, OpenClaw, Pi — **Windows, macOS, Linux**

**Categories**: Security, Package Management

**Keywords**: npm, pip, security-gate, vulnerability

___

## 🚀 Quick Start

**Prerequisites**: Node.js 18+ (recommended, cross-platform) **or** bash + curl + jq (Unix-only)

**Choose ONE script variant and use it consistently:**
- **Node.js** (`*.mjs`): Works on Windows, macOS, Linux. Use if `node --version` succeeds.
- **Bash** (`*.sh`): Unix only (macOS/Linux). Requires bash, curl, jq.

**1. Register** (one-time):
```bash
# Pick ONE — do not run both:
node scripts/register.mjs your-agent-name   # Node.js (cross-platform)
bash scripts/register.sh your-agent-name    # Bash (Unix-only)
```

**2. Installation** (platform-specific instructions in README.md):
- **Claude Code**: `ln -s "$(pwd)" ~/.claude/skills/agentaudit` → Restart Claude Code
- **Cursor**: `ln -s "$(pwd)" ~/.cursor/skills/agentaudit` → Restart Cursor
- **Windsurf**: `ln -s "$(pwd)" ~/.windsurf/skills/agentaudit` → Restart Windsurf
- **OpenClaw**: `clawhub install agentaudit`
- **VS Code Copilot**: `ln -s "$(pwd)" .github/skills/agentaudit` → Restart VS Code

**3. Verify**:
```bash
# Pick ONE:
node ~/.claude/skills/agentaudit/scripts/gate.mjs npm lodash   # Node.js
bash ~/.claude/skills/agentaudit/scripts/gate.sh npm lodash    # Bash
# Expected: JSON with "gate": "PASS"
```

**Important**: Scripts require absolute paths or `AGENTAUDIT_HOME` env var:
``