Навыки dependency-upgrade

📦

dependency-upgrade

Name: dependency-upgrade
Author: agentkitco

v1.0 Ревизия содержимого r1 Безопасно ⚙️ Внешние команды

Upgrade Dependencies With Focused Migration Checks

Dependency upgrades can introduce breaking changes and obscure existing failures. This skill guides focused migrations through release notes, baseline comparisons, minimal edits, and rollback reporting.

Поддерживает: Claude Codex Code(CC)

🥉 78 Бронза

Maintain this Skill? Claim it 🥉 78 Бронза

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "dependency-upgrade" from https://skillstore.io/skills/agentkitco-dependency-upgrade.md and its manifest at https://skillstore.io/api/skills/agentkitco-dependency-upgrade/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/agentkitco-dependency-upgrade.md Подписанный manifest GET /api/skills/agentkitco-dependency-upgrade/manifest Подписанный lockfile GET /api/skills/agentkitco-dependency-upgrade/lockfile

Протестировать

Использование «dependency-upgrade». Show an example planning report for a major dependency upgrade.

Ожидаемый результат:

Illustrative plan: confirm the installed version from the lockfile and select an explicit target.
Review intervening release notes and list affected API usages with file references.
Record baseline checks before changes and request approval for required runtime or peer upgrades.
Report verification differences and a rollback option after implementation.

Использование «dependency-upgrade». Show an example response when an upgrade requires an unapproved runtime change.

Ожидаемый результат:

Illustrative status: paused pending approval for the required runtime change.
Present the documented minimum runtime and explain why it expands the requested scope.
Ask whether to approve the runtime change or consider another target version.
Identify checks not completed and avoid claiming the migration passed.

Аудит безопасности

Безопасно

v2 • 22.10.2026 Открыть версионный отчет

All five static findings are false positives involving Markdown backticks, routine package version queries, code search, and rollback documentation. No evidence found of malicious intent, credential access, data exfiltration, or prompt injection in SKILL.md.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Факторы риска

⚙️ Внешние команды (4)

SKILL.md:16 SKILL.md:19 SKILL.md:32-39 SKILL.md:39-40

Последний завершенный статический и семантический аудит не обнаружил подтвержденных проблем безопасности. Это не доказывает отсутствие побочных эффектов у навыка.

Аудитор:: codex Посмотреть историю аудитов →

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentkitco-dependency-upgrade/security.svg)](https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-dependency-upgrade/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/agentkitco-dependency-upgrade.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

agentkitco. (2026). dependency-upgrade security audit report (audit version 2) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2

Цитата BibTeX

@techreport{agentkitco-agentkitco-dependency-upgrade-2026,
  author = {agentkitco},
  title = {dependency-upgrade security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2},
  note = {Author version 1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "dependency-upgrade security audit report (audit version 2)"
version: "1.0"
type: report
authors:
  - name: "agentkitco"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2"
identifiers:
  - type: other
    value: "skillstore:agentkitco-dependency-upgrade:audit:2"
    description: "Skillstore immutable audit report identifier"

Сравнить варианты

3 устанавливаемых вариантов

Навык каждого автора остаётся отдельным устанавливаемым вариантом. Рекомендуемый вариант ранжируется по данным Skillstore.

Почему этот вариант первый

Более высокая достоверность данных

Автор / источник Оценка Skillstore Достоверность доказательств Использование в Skillstore Обновлено

sickn33 Рекомендуется

sickn33-dependency-upgrade

Оценка Skillstore 78

Достоверность доказательств Высокий

Использование в Skillstore 16

Обновлено

2026-09-09

agentkitco Текущий

agentkitco-dependency-upgrade

Оценка Skillstore 78

Достоверность доказательств Средний

Использование в Skillstore 7

Обновлено

2026-10-22

wshobson

wshobson-dependency-upgrade

Оценка Skillstore 69

Достоверность доказательств Высокий

Использование в Skillstore 16

Обновлено

2026-09-09

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Update an application library

Inspect release notes, identify affected APIs, update one package, and compare project checks against the baseline.

Prepare a framework migration

Map major-version changes, identify runtime and peer requirements, and request approval before expanding the upgrade scope.

Document a security-related upgrade

Upgrade an affected dependency and cite an advisory only when official documentation supports the security claim.

Попробуйте эти промпты

Inspect an upgrade target

Check the installed version of [package] and identify the latest release. Summarize relevant release notes without changing files.

Perform a focused upgrade

Upgrade [package] to [target version]. Record baseline checks, review release notes, update affected code, and compare verification results.

Plan a major migration

Plan the migration of [framework] from [current version] to [target version]. Map breaking APIs and request approval for runtime or peer changes.

Resolve conflicts with evidence

Investigate [package] upgrade conflicts without overriding dependency constraints. Present conflict output, options, official advisory evidence if applicable, verification gaps, and rollback guidance.

Лучшие практики

Start with a clean working tree and record existing failures before changing dependencies.
Use the project package manager for manifest and lockfile updates, and cite release notes for applicable changes.
Compare verification results with the baseline and document skipped checks, remaining warnings, and rollback steps.

Избегать

Running a blanket dependency update when the request concerns one package.
Combining an upgrade with unrelated refactoring or changing runtime requirements without approval.
Skipping failing tests, loosening version ranges, or overriding conflicts to conceal compatibility problems.

Часто задаваемые вопросы

Which assistants can use this skill?

The listing supports Claude, Codex, and Claude Code. Practical execution requires repository access and the tools needed for the project.

Does this skill include an automated upgrade script?

No. It contains a Markdown workflow that guides an assistant through planning, edits, verification, and reporting.

Can it upgrade multiple dependencies together?

It focuses on one dependency or a tightly coupled group, including required peers. It explicitly rejects blanket updates.

What happens when release notes are missing?

The workflow requires stating that release notes are unavailable and treating the upgrade as higher risk.

Will it change runtime requirements automatically?

No. It requires stopping and asking before changing minimum runtime or peer versions.

Can it prove that an upgrade fixes a vulnerability?

It permits security claims only when supported by an official advisory or release notes. It does not provide an independent vulnerability scanner.

Сведения для разработчиков

Автор

agentkitco

Лицензия

MIT

Версия автора

v1.0

Ревизия Skillstore

Примечание о версии

Заявленная автором версия не соответствует SemVer.

Репозиторий

https://github.com/agentkitco/agentkit-dev-skills/tree/a5058856442fcb89bd538b1c01f94558488bfac3/skills/dependency-upgrade

Ссылка

18efac79a818d7e997295839638fdd21906cfd1c

Актуальность поддержки

22.10.2026

Использование

5 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md