Dependency management

Reviews Dependabot gem upgrade PRs for breaking changes, codebase impact, and merge readiness.

ThibautBaissac/rails_ai_agents

Golang dependency management — go.mod, installing/upgrading packages, Minimal Version Selection, vulnerability scanning, binary size, Dependabot/Renovate, conflict resolution, go.work.

context-labs/whip

Release new versions of sidecar. An agent skill from marcus/sidecar.

marcus/sidecar

Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns.

briiirussell/cybersecurity-skills

Audit Maven dependencies for outdated versions, security vulnerabilities, and conflicts.

decebals/claude-code-java

A skill your agent uses when orchestrating Agent Teams for parallel development - team composition, task distribution, dependency management, and result aggregation.

sangrokjung/claude-forge

Scan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check.

sickn33/agentic-awesome-skills

This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source dependencies in CI/CD pipelines.

mukul975/Anthropic-Cybersecurity-Skills

Scans your project for outdated npm, pip, Cargo, Go, or Ruby packages.

Varnan-Tech/opendirectory

Install and configure shadcn/ui components for React projects.

jezweb/claude-skills

Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation, using edit-distance, keyboard-proximity, and known-target corpus matching with…

mukul975/Anthropic-Cybersecurity-Skills

Autonomous iteration loops for .NET: drive a broken build or failing test suite to green with bounded iterations, progress detection, and fail-safe guards that prevent infinite retries and wasted…

codewithmukesh/dotnet-claude-kit

Guided, safe migration workflow covering EF Core schema migrations, .NET version upgrades, and NuGet dependency updates — each with rollback strategies and verification steps.

codewithmukesh/dotnet-claude-kit

Configures Depot-managed GitHub Actions runners as a drop-in replacement for GitHub-hosted runners.

PostHog/posthog

Catch the deterministic CI failures reachable from your diff before pushing, with hogli ci:preflight.

PostHog/posthog

Setting up Python environments for Streamlit apps. An agent skill from iusztinpaul/designing-real-world-ai-agents-workshop.

iusztinpaul/designing-real-world-ai-agents-workshop

Add or repair a read-only upstream submodule under references/.

rigortype/rigor

Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response.

c0x12c/ai-toolkit

分析 Dependabot 安全告警，评估安全风险并创建修复任务。当用户要求分析 Dependabot 告警、评估依赖漏洞风险时触发。参数为告警编号。

ModelEngine-Group/fit-framework

Review and manage Dependabot PRs. An agent skill from davila7/claude-code-templates.

davila7/claude-code-templates

Analyzes a Dependabot PR to determine what actually changed in each bumped package and whether those changes affect this repo.

try-works/role-model

Scan project dependencies for known vulnerabilities and CVEs.

ruvnet/ruflo

You are a dependency management expert specializing in safe, incremental upgrades of project dependencies.

aiskillstore/marketplace

A skill your agent uses when the user says 'dependency audit', 'npm audit', 'pip audit', 'cargo audit', 'security vulnerabilities', 'outdated packages', 'supply chain', or needs to scan project…

cwinvestments/memstack

[omh] Security event on the code already shipped -- a CVE in a dependency, a secret committed to the repo, a license question, an advisory: triage reachability and severity, contain in order, and…

rlaope/oh-my-hermes

Dependency management specialist. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

关闭 Dependabot 安全告警，需提供合理理由。当用户要求关闭 Dependabot 告警、dismiss Dependabot 告警时触发。参数为告警编号。

ModelEngine-Group/fit-framework

Dependabot-aware dependency updates with security audit, real-CI validation, and a unified PR.

joshukraine/dotfiles

A skill your agent uses when working in a multi-module Maven project.

rrezartprebreza/spring-boot-skills

A skill your agent uses when working in a multi-module Maven project.

rrezartprebreza/spring-boot-skills

Triage GitHub Dependabot security alerts into one-point GUS work items that bump the outermost consumer.

forcedotcom/salesforcedx-vscode

World-class Java and Spring Boot development skill for enterprise applications, microservices, and cloud-native systems.

benchflow-ai/skillsbench

Autonomous NeMo-RL research agent workflow for directed hypothesis testing and open-ended discovery.

NVIDIA/skills

Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardDog, manual tarball inspection, and dynamic detonation with network/filesystem…

mukul975/Anthropic-Cybersecurity-Skills

Audit a Node.js project's installed npm dependency tree for known CVEs by wrapping the npm audit JSON output and emitting findings in the canonical penetration-tester schema.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when you need to review, improve, or troubleshoot a Maven pom.xml file — including dependency management with BOMs, plugin configuration, version centralization, multi-module…

jabrena/plinth

C/C++ package manager skill covering Conan and vcpkg. An agent skill from mohitmishra786/low-level-dev-skills.

mohitmishra786/low-level-dev-skills

Regenerate both npm lockfiles after any manual change to package.json.

fjrevoredo/mini-diarium

Perform a NeMo Relay project release-version change across project-owned manifests, dependencies, lockfiles, and generated attribution surfaces while keeping just set-version coverage complete.

NVIDIA/NeMo-Relay

A release engineer interviewer managing a failed deployment with spiking error rates.

PrepLabsAI/InterviewMentor

Resolve Dependabot security alerts on owid/etl by upgrading vulnerable dependencies.

owid/etl

Runs Renovate against this repo via task renovate:sync to open or update dependency update PRs.

agntcy/coffeeAgntcy

Merge Dependabot / dependency-bot bump PRs quickly and safely.

akitaonrails/my-skills

Suede AI CI and branch-protection wiring for any repo and any stack: path-aware jobs, a single aggregator required check that cannot deadlock, lockfile hygiene, runtime pinning from the repo, and…

JasonColapietro/suede-creator-skills

Inline orchestration workflow for dependency audit and updates with Beads integration.

maslennikov-ig/claude-code-orchestrator-kit

Apply when reverting commits, undoing merges, or recovering from branch contamination.

ZaxbyHub/opencode-swarm

Scan project dependencies for known vulnerabilities (CVEs). An agent skill from OWASP/secure-agent-playbook.

OWASP/secure-agent-playbook

Weekly. An agent skill from markfulton/ai-employees.

markfulton/ai-employees