Tgf Server Dev
thkhxm/tgf
基于 tgf v2（github.com/thkhxm/tgf/v2）用确定性的 tgfctl 工作流创建、验证和维护 Go 游戏服务器项目。
Inspect Go module dependencies, detect outdated or vulnerable modules, and recommend safe updates or pinning strategies.
Install Dependency Auditor
$ npx skills add pilinux/gorest --skill dependency-auditor -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install pilinux/gorest dependency-auditor --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/pilinux/gorest.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/dependency-auditor .claude/skills/dependency-auditor && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "dependency-auditor" agent skill from https://github.com/pilinux/gorest/tree/main/.agents/skills/dependency-auditor into .claude/skills/dependency-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-auditor", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/pilinux/gorest/tree/main/.agents/skills/dependency-auditorType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add pilinux/gorest --skill dependency-auditor -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install pilinux/gorest dependency-auditor --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pilinux/gorest.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/dependency-auditor .agents/skills/dependency-auditor && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "dependency-auditor" agent skill from https://github.com/pilinux/gorest/tree/main/.agents/skills/dependency-auditor into .agents/skills/dependency-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-auditor", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add pilinux/gorest --skill dependency-auditor -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install pilinux/gorest dependency-auditor --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pilinux/gorest.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/dependency-auditor .cursor/skills/dependency-auditor && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "dependency-auditor" agent skill from https://github.com/pilinux/gorest/tree/main/.agents/skills/dependency-auditor into .cursor/skills/dependency-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-auditor", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/pilinux/gorest.git --path .agents/skills/dependency-auditor--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add pilinux/gorest --skill dependency-auditor -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install pilinux/gorest dependency-auditor --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pilinux/gorest.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/dependency-auditor .gemini/skills/dependency-auditor && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "dependency-auditor" agent skill from https://github.com/pilinux/gorest/tree/main/.agents/skills/dependency-auditor into .gemini/skills/dependency-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-auditor", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install pilinux/gorest dependency-auditorInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add pilinux/gorest --skill dependency-auditor -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/pilinux/gorest.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/dependency-auditor .github/skills/dependency-auditor && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "dependency-auditor" agent skill from https://github.com/pilinux/gorest/tree/main/.agents/skills/dependency-auditor into .github/skills/dependency-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-auditor", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add pilinux/gorest --skill dependency-auditor -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install pilinux/gorest dependency-auditor --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/pilinux/gorest.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/dependency-auditor .opencode/skills/dependency-auditor && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "dependency-auditor" agent skill from https://github.com/pilinux/gorest/tree/main/.agents/skills/dependency-auditor into .opencode/skills/dependency-auditor/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dependency-auditor", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
dependency-auditor- GitHub stars
- 506
- Token cost
- ~273 tokens
- SKILL.md length
- 111 words
- Files
- 1
- Skills in repo
- 20
- Repo updated
- First seen
- Licence
- MIT
At a glance
Inspect Go module dependencies, detect outdated or vulnerable modules, and recommend safe updates or pinning strategies.
- Databases work in your project
- SKILL.md covers When to Use, Responsibilities, Rules and Commands, plus 2 more sections
- Calls go
What it does
Dependency Auditor is an agent skill from pilinux/gorest. Inspect Go module dependencies, detect outdated or vulnerable modules, and recommend safe updates or pinning strategies.
Its SKILL.md is about 270 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Databases. It works with Go. The repository describes itself as: Go RESTful API starter kit with Gin, JWT, GORM (MySQL, PostgreSQL, SQLite), Redis, Mongo, 2FA, email verification, password recovery. The licence is MIT.
When your agent uses it
- Databases work in your project
Example prompts
- “/dependency-auditor”
What it can do on your machine
Read from SKILL.md and the folder at commit 38aab64. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
go
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Dependency Auditor loads about 273 tokens when it runs. Until then it costs about 35 tokens; SKILL.md has 111 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from pilinux/gorest at commit 38aab64, republished under its MIT licence (© pilinux). 111 words, ~273 tokens.
Download SKILL.mdSave it as
.claude/skills/dependency-auditor/SKILL.md (or your agent's skills folder).- name
- dependency-auditor
- description
- Inspect Go module dependencies, detect outdated or vulnerable modules, and recommend safe updates or pinning strategies.
- license
- MIT
- metadata.mode
- analysis
- metadata.purpose
- deps
Dependency Auditor
When to Use
- The user asks to audit
go.mod/go.sumfor outdated modules or known vulnerabilities.
Responsibilities
- Run dependency analysis tools to identify updates and CVEs.
- Suggest minimal version bumps and
go.modedits, including tests to run after updates.
Rules
- Do not modify
go.modwithout explicit approval. - Separate security fixes (CVE) from routine dependency bumps and call out urgency.
Commands
go list -m -u all(list outdated modules)govulncheck ./...(check known vulnerabilities)go mod tidy(recommendation only, do not run without approval)
Output
- Outdated modules with current and latest versions.
- Vulnerabilities (CVE) with severity and affected ranges.
- Recommended next steps and tests to run after updates.
Related Skills
ci-orchestrator,static-analysis
© pilinux, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .agents/skills/dependency-auditor of pilinux/gorest.
Open the folder on GitHubat commit 38aab64
Compare with similar skills
Dependency Auditor next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Dependency Auditor this skillpilinux/gorest | 506 | — | ~273 | Automated safety check: Pass | MIT | |
| Tgf Server Devthkhxm/tgf | 128 | — | ~1.3k | Automated safety check: Notes | MIT | |
| Golang Samber Hotsamber/cc-skills-golang | 3.4k | — | ~2k | Automated safety check: Pass | MIT | |
| Golang Samber Hotcontext-labs/whip | 1.1k | — | ~1.9k | Automated safety check: Pass | MIT | |
| Golang Rulessoftspark/ai-toolkit | 179 | — | ~3k | Automated safety check: Pass | Apache-2.0 | |
| NGINX Ingress Policy CRD Guidenginx/kubernetes-ingress | 5.1k | — | ~2k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Golang Samber Hot
samber/cc-skills-golang
In-memory caching in Golang using samber/hot — eviction algorithms (LRU, LFU, TinyLFU, W-TinyLFU, S3FIFO, ARC, TwoQueue, SIEVE, FIFO), TTL, cache loaders, sharding, stale-while-revalidate, missing…
Golang Samber Hot
context-labs/whip
In-memory caching in Go using samber/hot — eviction (LRU, LFU, TinyLFU, S3FIFO, ARC, SIEVE), TTL, loaders, sharding, stale-while-revalidate, missing-key caching, metrics.
Golang Rules
softspark/ai-toolkit
Go coding rules: style, patterns, security, testing. An agent skill from softspark/ai-toolkit.
NGINX Ingress Policy CRD Guide
nginx/kubernetes-ingress
Step-by-step checklist for adding a new Policy CRD type to the NGINX Ingress Controller, from the Go types and validation to config generation and templates.
Squix
eduardofuncao/squix
Run SQL queries across databases (Postgres, MySQL, SQLite, etc.) via the squix CLI.
More from pilinux/gorest
All 20 skills in this repoConfig Loader Helper
pilinux/gorest
Diagnoses configuration failures in the gorest project by listing the required environment variables grouped by feature and giving minimal commands for a safe local test setup.
Go AST Code Introspection
pilinux/gorest
Enumerates Go declarations and signatures from the syntax tree, then proposes small, mechanically safe refactors with file and line citations.
Local Build and Run
pilinux/gorest
Builds and runs a Go project locally to reproduce compile or runtime problems safely, using test environment variables and mocks instead of production credentials.
Code Navigation
pilinux/gorest
Rapid, focused navigation to locate definitions/usages and map the impact of proposed changes.
Cited Code Explainer
pilinux/gorest
Explains how a module behaves in a few short, read-only sections, with a path-and-line citation behind every non-trivial claim.
Cited File Reader
pilinux/gorest
Reads only the lines needed from a source file and answers with a short summary and path:line citations, without changing anything.
Related
Works with
Categories
Questions about Dependency Auditor
What does Dependency Auditor do?
Inspect Go module dependencies, detect outdated or vulnerable modules, and recommend safe updates or pinning strategies. Dependency Auditor is an agent skill from pilinux/gorest. Inspect Go module dependencies, detect outdated or vulnerable modules, and recommend safe updates or pinning strategies.
When should I use Dependency Auditor?
Dependency Auditor fits situations like: databases work in your project.
How do I install Dependency Auditor in Claude Code?
Run `npx skills add pilinux/gorest --skill dependency-auditor -a claude-code`. Or copy the skill folder (.agents/skills/dependency-auditor in pilinux/gorest) into .claude/skills/dependency-auditor in your project. Claude Code loads it when a task matches its description.
How do I install Dependency Auditor in Codex?
Run `npx skills add pilinux/gorest --skill dependency-auditor -a codex`. Or copy the skill folder (.agents/skills/dependency-auditor in pilinux/gorest) into .agents/skills/dependency-auditor in your project. Codex loads it when a task matches its description.
Can I use Dependency Auditor in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add pilinux/gorest --skill dependency-auditor -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/dependency-auditor, .gemini/skills/dependency-auditor, .github/skills/dependency-auditor and .opencode/skills/dependency-auditor in your project.
What does Dependency Auditor need to run?
Going by SKILL.md and its folder, Dependency Auditor needs the command-line tools its instructions call (go).
Does Dependency Auditor access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Dependency Auditor safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Dependency Auditor use?
Dependency Auditor is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Dependency Auditor use?
About 273 tokens (SKILL.md is roughly 1.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Dependency Auditor?
Skills that share tags, products or a category with Dependency Auditor: Tgf Server Dev (thkhxm/tgf, 128 stars), Golang Samber Hot (samber/cc-skills-golang, 3.4k stars), Golang Samber Hot (context-labs/whip, 1.1k stars) and Golang Rules (softspark/ai-toolkit, 179 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Dependency Auditor?
pilinux (a GitHub user) maintains it in pilinux/gorest, which has 506 GitHub stars. The repository holds 20 skills in this directory. The repository was last updated on September 25, 2026.
Source: pilinux/gorest on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.