New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Dep Lib Review

by mizchi in mizchi/skills

Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist.

No licenceAuto-check passedSecurity

Install Dep Lib Review

skills CLI
$ npx skills add mizchi/skills --skill dep-lib-review -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install mizchi/skills dep-lib-review --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/mizchi/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/dep-lib-review .claude/skills/dep-lib-review && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
dep-lib-review
GitHub stars
360
Token cost
~1.8k tokens
SKILL.md length
589 words
Files
2
Skills in repo
69
Repo updated
First seen
Licence
None found

At a glance

Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist.

  • Works in 5 steps: Gather current state → Triage → Execute updates → …
  • Asked to review
  • SKILL.md covers Trigger conditions, Step 1 — Gather current state, Step 2 — Triage and Step 3 — Execute updates, plus 4 more sections
  • Calls pnpm and jq

What it does

Dep Lib Review is an agent skill from mizchi/skills. Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist. Run monthly or before major releases. Use when asked to review or update dependencies in a repo.

Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `README.md`).

It sits in Security, covering Security review and Code migrations. It works with pnpm and Node.js. The repository describes itself as: Agent skills by mizchi, distributed via APM.

When your agent uses it

  • Asked to review
  • Update dependencies in a repo

Example prompts

  • “/dep-lib-review”

Requirements

  • Node.js

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Gather current state
  2. Triage
  3. Execute updates
  4. Validation checklist
  5. Output

What it can do on your machine

Read from SKILL.md and the folder at commit 62f5808. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • pnpm
    • jq

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use pnpm, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Dep Lib Review loads about 1.8k tokens when it runs. Until then it costs about 69 tokens; SKILL.md has 589 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~69
When it runs · the whole SKILL.md, loaded when a task matches
~1.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 589 words (~1,757 tokens).

name
dep-lib-review

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in dep-lib-review of mizchi/skills.

  • SKILL.md
  • README.md

Open the folder on GitHubat commit 62f5808

Compare with similar skills

Dep Lib Review next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Dep Lib Review compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Dep Lib Review this skillmizchi/skills360—~1.8kAutomated safety check: PassNone
Migrate to Denodenoland/skills100—~2.2kAutomated safety check: WarnMIT
Owasp Security AuditLIDR-academy/AI4Devs-LTI-extended278—~4.3kAutomated safety check: NotesMIT
Security Vuln Remediationstacklok/toolhive-studio171—~2.3kAutomated safety check: NotesApache-2.0
Fix Vulnslinuxfoundation/insights282—~3.8kAutomated safety check: NotesMIT
Security Auditjellydn/my-ai-tools123—~2.9kAutomated safety check: NotesMIT

Similar skills

  • Migrate to Deno

    denoland/skills

    Official

    Moves a Node.js, npm, Yarn, pnpm or Bun project to Deno in reversible steps, starting with Deno as the package manager and changing no code unless needed.

    100 GitHub stars~2.2k tokensUpdated 2 mo ago
    DevelopmentAuto-check: warnings

  • Owasp Security Audit

    LIDR-academy/AI4Devs-LTI-extended

    A skill your agent uses when performing a cybersecurity audit, security review, OWASP Top 10 compliance check, vulnerability assessment, or preparing for a penetration test on a…

    278 GitHub stars~4.3k tokensUpdated 4 mo ago
    SecurityAuto-check: notes

  • Security Vuln Remediation

    stacklok/toolhive-studio

    Remediate security vulnerabilities found by Grype or pnpm audit.

    171 GitHub stars~2.3k tokensUpdated yesterday
    SecurityAuto-check: notes

  • Fix Vulns

    linuxfoundation/insights

    Automated triage and fixing of Dependabot security vulnerabilities (IN-1189).

    282 GitHub stars~3.8k tokensUpdated 9 days ago
    SecurityAuto-check: notes

  • Security Audit

    jellydn/my-ai-tools

    A skill your agent uses when reviewing code for security vulnerabilities, hardening an application, or deriving security requirements from OWASP/ASVS guidance.

    123 GitHub stars~2.9k tokensUpdated yesterday
    SecurityAuto-check: notes

  • JS Security Audit

    c0x12c/ai-toolkit

    Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response.

    106 GitHub stars~1.6k tokensUpdated 3 mo ago
    SecurityAuto-check: warnings

More from mizchi/skills

All 69 skills in this repo

  • Publish Agent Skill

    mizchi/skills

    Package, publish, verify and update an agent skill through a Claude Code plugin marketplace, APM or the npx skills CLI.

    360 GitHub stars~1.7k tokensUpdated 9 days ago
    Auto-check passed

  • AI Index

    mizchi/skills

    Method and tooling for measuring how AI-generated a piece of prose reads, in Japanese or English.

    360 GitHub stars~3.6k tokensUpdated 9 days ago
    Auto-check passed

  • Cloudflare Deploy

    mizchi/skills

    Deploy applications and infrastructure to Cloudflare with the cf CLI and typed cloudflare.config.ts.

    360 GitHub stars~2.9k tokensUpdated 9 days ago
    Auto-check: notes

  • Review Image

    mizchi/skills

    Review screenshots or other images with OpenRouter vision models via bundled Deno scripts.

    360 GitHub stars~1.3k tokensUpdated 9 days ago
    Auto-check passed

  • Sqlc Gen Moonbit Safety

    mizchi/skills

    Post-generation safety checks for sqlc-gen-moonbit + Cloudflare D1.

    360 GitHub stars~995 tokensUpdated 9 days ago
    Auto-check passed

  • Apm Usage

    mizchi/skills

    Reference for APM (Agent Package Manager) — apm.yml syntax, install / uninstall / update commands, target detection, lockfile workflow.

    360 GitHub stars~1.9k tokensUpdated 9 days ago
    Auto-check passed

Works with

Categories

Questions about Dep Lib Review

What does Dep Lib Review do?

Periodic dependency review for Node.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist. Dep Lib Review is an agent skill from mizchi/skills.js/pnpm projects — outdated package triage, security audit, update batching strategy (patch/minor/major), validation checklist.

When should I use Dep Lib Review?

Dep Lib Review fits situations like: asked to review; update dependencies in a repo.

How do I install Dep Lib Review in Claude Code?

Run `npx skills add mizchi/skills --skill dep-lib-review -a claude-code`. Or copy the skill folder (dep-lib-review in mizchi/skills) into .claude/skills/dep-lib-review in your project. Claude Code loads it when a task matches its description.

How do I install Dep Lib Review in Codex?

Run `npx skills add mizchi/skills --skill dep-lib-review -a codex`. Or copy the skill folder (dep-lib-review in mizchi/skills) into .agents/skills/dep-lib-review in your project. Codex loads it when a task matches its description.

Can I use Dep Lib Review in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mizchi/skills --skill dep-lib-review -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/dep-lib-review, .gemini/skills/dep-lib-review, .github/skills/dep-lib-review and .opencode/skills/dep-lib-review in your project.

What does Dep Lib Review need to run?

Going by SKILL.md and its folder, Dep Lib Review needs the command-line tools its instructions call (pnpm and jq). Our summary lists: Node.js.

Does Dep Lib Review access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Dep Lib Review safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Dep Lib Review use?

No licence was found for Dep Lib Review or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Dep Lib Review use?

About 1.8k tokens (SKILL.md is roughly 7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Dep Lib Review?

Skills that share tags, products or a category with Dep Lib Review: Migrate to Deno (denoland/skills, 100 stars), Owasp Security Audit (LIDR-academy/AI4Devs-LTI-extended, 278 stars), Security Vuln Remediation (stacklok/toolhive-studio, 171 stars) and Fix Vulns (linuxfoundation/insights, 282 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Dep Lib Review?

mizchi (a GitHub user) maintains it in mizchi/skills, which has 360 GitHub stars. The repository holds 69 skills in this directory. The repository was last updated on October 2, 2026.

Source: mizchi/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.