Compétences dependency-upgrade
📦

dependency-upgrade

v1.0 Révision du contenu r1 Sûr ⚙️ Commandes externes

Upgrade Dependencies With Focused Migration Checks

Dependency upgrades can introduce breaking changes and obscure existing failures. This skill guides focused migrations through release notes, baseline comparisons, minimal edits, and rollback reporting.

Prend en charge: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 78 Bronze

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent
Review the Skillstore skill "dependency-upgrade" from https://skillstore.io/skills/agentkitco-dependency-upgrade.md and its manifest at https://skillstore.io/api/skills/agentkitco-dependency-upgrade/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Tester

Utilisation de « dependency-upgrade ». Show an example planning report for a major dependency upgrade.

Résultat attendu:

  • Illustrative plan: confirm the installed version from the lockfile and select an explicit target.
  • Review intervening release notes and list affected API usages with file references.
  • Record baseline checks before changes and request approval for required runtime or peer upgrades.
  • Report verification differences and a rollback option after implementation.

Utilisation de « dependency-upgrade ». Show an example response when an upgrade requires an unapproved runtime change.

Résultat attendu:

  • Illustrative status: paused pending approval for the required runtime change.
  • Present the documented minimum runtime and explain why it expands the requested scope.
  • Ask whether to approve the runtime change or consider another target version.
  • Identify checks not completed and avoid claiming the migration passed.

Audit de sécurité

Sûr
v2 • 22/10/2026 Ouvrir le rapport versionné

All five static findings are false positives involving Markdown backticks, routine package version queries, code search, and rollback documentation. No evidence found of malicious intent, credential access, data exfiltration, or prompt injection in SKILL.md.

1
Fichiers analysés
48
Lignes analysées
0
Éléments à examiner
0
Faux positifs ignorés

Facteurs de risque

Le dernier audit statique et sémantique terminé n’a détecté aucun constat de sécurité confirmé. Cela ne prouve pas que le skill est sans effets secondaires.
Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné
Évaluation de sécurité

Copier le lien du rapport

https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentkitco-dependency-upgrade/security.svg)](https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-dependency-upgrade/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/agentkitco-dependency-upgrade.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citations académiques (APA · BibTeX · CFF)

Citation APA

agentkitco. (2026). dependency-upgrade security audit report (audit version 2) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2

Citation BibTeX

@techreport{agentkitco-agentkitco-dependency-upgrade-2026, author = {agentkitco}, title = {dependency-upgrade security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "dependency-upgrade security audit report (audit version 2)" version: "1.0" type: report authors: - name: "agentkitco" date-released: "2026-10-22" url: "https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2" identifiers: - type: other value: "skillstore:agentkitco-dependency-upgrade:audit:2" description: "Skillstore immutable audit report identifier"

Comparer les variantes

3 variantes installables

Chaque auteur reste un skill installable distinct. La variante recommandée est classée selon les preuves Skillstore.

Pourquoi cette variante est première

Confiance des preuves plus forte
sickn33 Recommandé

sickn33-dependency-upgrade

Score Skillstore 78
Niveau de confiance des preuves Élevé
Utilisation Skillstore 16
Mis Ă  jour

2026-09-09

agentkitco Actuelle

agentkitco-dependency-upgrade

Score Skillstore 78
Niveau de confiance des preuves Moyen
Utilisation Skillstore 6
Mis Ă  jour

2026-10-22

wshobson-dependency-upgrade

Score Skillstore 69
Niveau de confiance des preuves Élevé
Utilisation Skillstore 16
Mis Ă  jour

2026-09-09

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen
55
Architecture
85
Maintenabilité
87
Contenu
65
Communauté
91
Conformité aux spécifications

Ce que vous pouvez créer

Update an application library

Inspect release notes, identify affected APIs, update one package, and compare project checks against the baseline.

Prepare a framework migration

Map major-version changes, identify runtime and peer requirements, and request approval before expanding the upgrade scope.

Document a security-related upgrade

Upgrade an affected dependency and cite an advisory only when official documentation supports the security claim.

Essayez ces prompts

Inspect an upgrade target
Check the installed version of [package] and identify the latest release. Summarize relevant release notes without changing files.
Perform a focused upgrade
Upgrade [package] to [target version]. Record baseline checks, review release notes, update affected code, and compare verification results.
Plan a major migration
Plan the migration of [framework] from [current version] to [target version]. Map breaking APIs and request approval for runtime or peer changes.
Resolve conflicts with evidence
Investigate [package] upgrade conflicts without overriding dependency constraints. Present conflict output, options, official advisory evidence if applicable, verification gaps, and rollback guidance.

Bonnes pratiques

  • Start with a clean working tree and record existing failures before changing dependencies.
  • Use the project package manager for manifest and lockfile updates, and cite release notes for applicable changes.
  • Compare verification results with the baseline and document skipped checks, remaining warnings, and rollback steps.

Éviter

  • Running a blanket dependency update when the request concerns one package.
  • Combining an upgrade with unrelated refactoring or changing runtime requirements without approval.
  • Skipping failing tests, loosening version ranges, or overriding conflicts to conceal compatibility problems.

Foire aux questions

Which assistants can use this skill?
The listing supports Claude, Codex, and Claude Code. Practical execution requires repository access and the tools needed for the project.
Does this skill include an automated upgrade script?
No. It contains a Markdown workflow that guides an assistant through planning, edits, verification, and reporting.
Can it upgrade multiple dependencies together?
It focuses on one dependency or a tightly coupled group, including required peers. It explicitly rejects blanket updates.
What happens when release notes are missing?
The workflow requires stating that release notes are unavailable and treating the upgrade as higher risk.
Will it change runtime requirements automatically?
No. It requires stopping and asking before changing minimum runtime or peer versions.
Can it prove that an upgrade fixes a vulnerability?
It permits security claims only when supported by an official advisory or release notes. It does not provide an independent vulnerability scanner.

Détails du développeur

Auteur

agentkitco

Licence

MIT

Version de l’auteur

v1.0

Révision Skillstore

r1

Avis de version

La version déclarée par l’auteur n’est pas un SemVer valide.

Réf

18efac79a818d7e997295839638fdd21906cfd1c

Récence de maintenance

22/10/2026

Utilisation

5 téléchargements · 0 vues

Structure de fichiers

đź“„ SKILL.md

Autres compétences de agentkitco

Tout afficher
Tout afficher
📦

testing-patterns

81

Planifier des tests fiables dans toute votre base de code

par 0xDarkMatter

Cette compétence aide les équipes à choisir des stratégies de test, des mocks, des jeux de données, des seuils de couverture et des modèles CI sans mélanger les périmètres de test. Elle fournit à Claude, Codex et Claude Code des recommandations structurées pour les tests unitaires, d’intégration, de bout en bout, TDD e

Codage et développement Voir