Review, apply, verify, or merge gocron dependency updates from Dependabot or manual requests.
$ npx skills add gocronx-team/gocron --skill dependency-update -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install gocronx-team/gocron dependency-update --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/gocronx-team/gocron.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/dependency-update .claude/skills/dependency-update && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "dependency-update" agent skill from https://github.com/gocronx-team/gocron/tree/master/.agents/skills/dependency-update into .claude/skills/dependency-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-update", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/gocronx-team/gocron/tree/master/.agents/skills/dependency-updateType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add gocronx-team/gocron --skill dependency-update -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install gocronx-team/gocron dependency-update --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/gocronx-team/gocron.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/dependency-update .agents/skills/dependency-update && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "dependency-update" agent skill from https://github.com/gocronx-team/gocron/tree/master/.agents/skills/dependency-update into .agents/skills/dependency-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-update", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add gocronx-team/gocron --skill dependency-update -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install gocronx-team/gocron dependency-update --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/gocronx-team/gocron.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/dependency-update .cursor/skills/dependency-update && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "dependency-update" agent skill from https://github.com/gocronx-team/gocron/tree/master/.agents/skills/dependency-update into .cursor/skills/dependency-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-update", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/gocronx-team/gocron.git --path .agents/skills/dependency-update--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add gocronx-team/gocron --skill dependency-update -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install gocronx-team/gocron dependency-update --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/gocronx-team/gocron.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/dependency-update .gemini/skills/dependency-update && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "dependency-update" agent skill from https://github.com/gocronx-team/gocron/tree/master/.agents/skills/dependency-update into .gemini/skills/dependency-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-update", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install gocronx-team/gocron dependency-updateInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add gocronx-team/gocron --skill dependency-update -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/gocronx-team/gocron.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/dependency-update .github/skills/dependency-update && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "dependency-update" agent skill from https://github.com/gocronx-team/gocron/tree/master/.agents/skills/dependency-update into .github/skills/dependency-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-update", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add gocronx-team/gocron --skill dependency-update -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install gocronx-team/gocron dependency-update --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/gocronx-team/gocron.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/dependency-update .opencode/skills/dependency-update && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "dependency-update" agent skill from https://github.com/gocronx-team/gocron/tree/master/.agents/skills/dependency-update into .opencode/skills/dependency-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-update", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
dependency-updateReview, apply, verify, or merge gocron dependency updates from Dependabot or manual requests.
Dependency Update is an agent skill from gocronx-team/gocron. Review, apply, verify, or merge gocron dependency updates from Dependabot or manual requests. Use for Go modules, root/admin/docs pnpm packages, GitHub Actions, Docker base images, security advisories, lockfile conflicts, or dependency update pull requests.
Its SKILL.md is about 890 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files (for example `agents/openai.yaml`).
It sits in Development, covering Dependency management. It works with Go, pnpm, Docker and GitHub Actions. The repository describes itself as: distributed scheduled task management system. The licence is MIT.
Read from SKILL.md and the folder at commit e76e9da. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
pnpmgoFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md. Its commands use pnpm, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Dependency Update loads about 891 tokens when it runs. Until then it costs about 69 tokens; SKILL.md has 439 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from gocronx-team/gocron at commit e76e9da, republished under its MIT licence (© gocronx-team). 439 words, ~891 tokens.
.claude/skills/dependency-update/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.Handle one dependency group and ecosystem at a time unless a security fix requires coordinated versions. A request to inspect a PR or alert is read-only; merge, dismiss, commit, and push only when explicitly requested.
Never edit a lockfile by hand. Use the repository package manager and preserve its existing lockfile format. Do not silence peer dependency failures or add blanket advisory ignores to make a check green.
Use the narrowest ecosystem command that updates the requested package and its required peers. Review the resulting diff for unrelated upgrades, install scripts, new transitive packages, license changes, and unexpected engine or Go version changes. Revert unrelated generated churn without discarding pre-existing user changes.
For a Dependabot PR, prefer checking out or updating its branch rather than reconstructing a different lockfile locally. If the branch is stale, rebase or regenerate only when the user authorized changes to that PR.
go mod tidy, ensure go.mod and go.sum contain
only expected changes, then run affected package tests with -race,
go vet ./..., and govulncheck ./... when available.pnpm --dir web/gocronx-admin build-only,
pnpm --dir web/gocronx-admin exec vue-tsc --noEmit, and
pnpm --dir web/gocronx-admin lint.pnpm --dir docs docs:build.Dockerfile.gocron and inspect architecture,
runtime user, binary/library compatibility, and vulnerability scan results.Run the relevant package tests even if the dependency is marked dev-only.
Invoke $verify before merge for every code or lockfile update.
State the exact old/new versions, why the update is needed, runtime exposure, breaking-change review, manifest/lockfiles changed, audit result, checks run, and remaining risk. Recommend merge only when required checks are green and the diff contains no unexplained dependency churn.
If committing, use one single-line Conventional Commit subject under 100
characters and no Co-Authored-By, for example:
chore(deps): update vue to 3.6.0© gocronx-team, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 1 other file in .agents/skills/dependency-update of gocronx-team/gocron.
Open the folder on GitHubat commit e76e9da
Dependency Update next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Dependency Update this skillgocronx-team/gocron | 808 | — | ~891 | Automated safety check: Pass | MIT | |
| Golang Continuous Integrationsamber/cc-skills-golang | 3.4k | — | ~3.7k | Automated safety check: Pass | MIT | |
| Audit And Reduce Dependenciesgrafana/skills | 279 | — | ~3.6k | Automated safety check: Warn | Apache-2.0 | |
| Linea Dependency MaintenanceConsensys-Incorporated/linea-attestation-registry | 177 | 1 repos | ~3.7k | Automated safety check: Warn | MIT | |
| Golang Continuous Integrationcontext-labs/whip | 1.1k | — | ~3.5k | Automated safety check: Pass | MIT | |
| Sync Dependabot App Depsossf/oss-crs | 165 | — | ~1.7k | Automated safety check: Notes | MIT |
samber/cc-skills-golang
GitHub Actions CI/CD pipeline configuration for Golang projects — workflow files for test, lint, SAST, coverage and vulnerability-scan jobs, Dependabot and Renovate config files, GoReleaser release…
grafana/skills
Reduces JavaScript dependency footprint with pnpm while preserving lockfile, workspace layout, and dependency range style.
Consensys-Incorporated/linea-attestation-registry
Safely plan and execute dependency maintenance for JavaScript/TypeScript (npm, pnpm) and GitHub Actions, including npm lockfiles, pnpm workspaces, catalogs, overrides, SHA-pinned action versions…
context-labs/whip
CI/CD with GitHub Actions for Golang — testing, linting, SAST, security scanning, coverage, Dependabot, Renovate, GoReleaser, release pipelines.
ossf/oss-crs
Read every open Dependabot PR for an application-code dependency (Python pip/uv and JS npm/yarn/pnpm) and carry each version bump over to the local dependency files (requirements.txt…
github/awesome-copilot
Comprehensive guide for configuring and managing GitHub Dependabot.
gocronx-team/gocron
Create, review, or verify gocron database migrations across SQLite, MySQL, and PostgreSQL.
gocronx-team/gocron
Audit or harden gocron security across Go, pnpm workspaces, containers, authentication, authorization, secrets, command execution, SSRF, and dependency vulnerabilities.
gocronx-team/gocron
Safely implement, diagnose, or review changes to gocron scheduling and task execution.
gocronx-team/gocron
Implement or review an end-to-end gocron HTTP API change. An agent skill from gocronx-team/gocron.
gocronx-team/gocron
Prepare or publish a safe gocron release by choosing a SemVer bump, updating AppVersion and migrations, invoking the complete verification gate, committing, checking CI, and creating an annotated tag.
gocronx-team/gocron
Cut a gocron release — bump AppVersion, align the migration version id, run the full CI check locally, and tag only when everything is green.
Works with
Categories
Review, apply, verify, or merge gocron dependency updates from Dependabot or manual requests. Dependency Update is an agent skill from gocronx-team/gocron. Review, apply, verify, or merge gocron dependency updates from Dependabot or manual requests.
Dependency Update fits situations like: root/admin/docs pnpm packages; Docker base images; security advisories; lockfile conflicts.
Run `npx skills add gocronx-team/gocron --skill dependency-update -a claude-code`. Or copy the skill folder (.agents/skills/dependency-update in gocronx-team/gocron) into .claude/skills/dependency-update in your project. Claude Code loads it when a task matches its description.
Run `npx skills add gocronx-team/gocron --skill dependency-update -a codex`. Or copy the skill folder (.agents/skills/dependency-update in gocronx-team/gocron) into .agents/skills/dependency-update in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add gocronx-team/gocron --skill dependency-update -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/dependency-update, .gemini/skills/dependency-update, .github/skills/dependency-update and .opencode/skills/dependency-update in your project.
Going by SKILL.md and its folder, Dependency Update needs the command-line tools its instructions call (pnpm and go). Our summary lists: Docker.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Dependency Update is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 891 tokens (SKILL.md is roughly 3.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Dependency Update: Golang Continuous Integration (samber/cc-skills-golang, 3.4k stars), Audit And Reduce Dependencies (grafana/skills, 279 stars), Linea Dependency Maintenance (Consensys-Incorporated/linea-attestation-registry, 177 stars) and Golang Continuous Integration (context-labs/whip, 1.1k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
gocronx-team (a GitHub organization) maintains it in gocronx-team/gocron, which has 808 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on October 2, 2026.
Source: gocronx-team/gocron on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
