Skip to main content

Dependency Auditor

subagent

Subagent. Reads the manifests and lock files in a tree and reports declared dependencies, declared licences, version ranges that float, and the places where the lock and the manifest disagree. It reads the files as written and makes no vulnerability claim.

What it is allowed to do: Read only

This profile looks and reports. It does not write to your files.

How to use it

Copy the profile into .vibe/agents/ in your project, keeping the filename dependency-auditor.toml.

A profile Vibe cannot parse fails silently: no error, no agent. If it does not appear, that is the first thing to check. The repository ships a checker for exactly this reason.

Read the full profile, including its allowlist and denylist, in the source file, part of awesome-mistral-vibe-agents, CC BY-SA 4.0. Not affiliated with, or endorsed by, Mistral AI.