セキュリティmanual
npm Audit Fix Loop
Fix high/critical npm audit findings one at a time with test verification — not a blind npm audit fix --force.
起動プロンプト
Start the "npm Audit Fix Loop" loop.
Goal: no high or critical npm audit vulnerabilities
Max iterations: 10
Between iterations run: npm audit --audit-level=high && npm test
Exit when: npm audit reports no high/critical issues
Step 1: Pick one high/critical advisory, apply the safest fix, run tests, and repeat.
Self-pace this loop. After each iteration, run the check command, read the output, and only continue if the exit condition is not met. Stop when the exit condition passes or max iterations is reached. Give a short status update each pass.基本情報
カテゴリ
セキュリティ
目標
no high or critical npm audit vulnerabilities
最大反復回数
10
検査コマンド
npm audit --audit-level=high && npm test
退出条件
npm audit reports no high/critical issues
対応エージェント
Cursor
手順
- 1
List vulnerabilities
Run npm audit --json. Pick the highest severity fixable issue (one at a time).
npm audit --audit-level=high - 2
Apply safe fix
Use npm audit fix for that advisory or bump the direct dependency. Avoid --force unless unavoidable.
npm test