Skills dependency-upgrade
๐Ÿ“ฆ

dependency-upgrade

v1.0 Content revision r1 Safe โš™๏ธ External commands

Upgrade Dependencies With Release Note Verification

Dependency upgrades can introduce breaking changes and obscure existing failures. This skill guides focused upgrades through release notes, baseline checks, targeted edits, and verification reports.

Supports: Claude Codex Code(CC)
Maintain this Skill? Claim it ๐Ÿฅ‰ 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "dependency-upgrade" from https://skillstore.io/skills/agentkitco-dependency-upgrade.md and its manifest at https://skillstore.io/api/skills/agentkitco-dependency-upgrade/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "dependency-upgrade". Plan a major-version dependency upgrade before editing.

Expected outcome:

  • Version review: installed and target versions identified; release-note sources linked.
  • Impact review: removed APIs and affected project files listed.
  • Approval needed: the target release requires a newer runtime.

Using "dependency-upgrade". Summarize a completed dependency upgrade and its verification.

Expected outcome:

  • Scope: the selected package, required peers, lockfile, and affected API usages were updated.
  • Verification: build and type checks passed; the same pre-existing test failure remains.
  • Follow-up: a deprecation warning remains documented.
  • Rollback: revert the upgrade commit and restore dependencies using the project package manager.

Security Audit

Safe
v1 โ€ข 10/17/2026 Open versioned report

All five static findings are false positives: Markdown backticks mark routine package queries, code searches, and a rollback report template. Version discovery concerns project dependencies, not system reconnaissance. No evidence found of prompt injection, credential theft, or data exfiltration in SKILL.md.

1
Files scanned
48
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentkitco-dependency-upgrade/security.svg)](https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-dependency-upgrade/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/agentkitco-dependency-upgrade.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

agentkitco. (2026). dependency-upgrade security audit report (audit version 1) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/1

BibTeX citation

@techreport{agentkitco-agentkitco-dependency-upgrade-2026, author = {agentkitco}, title = {dependency-upgrade security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/1}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "dependency-upgrade security audit report (audit version 1)" version: "1.0" type: report authors: - name: "agentkitco" date-released: "2026-10-17" url: "https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/1" identifiers: - type: other value: "skillstore:agentkitco-dependency-upgrade:audit:1" description: "Skillstore immutable audit report identifier"

Compare variants

3 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Stronger evidence confidence
sickn33 Recommended

sickn33-dependency-upgrade

Skillstore Score 78
Evidence Confidence High
Skillstore usage 13
Updated

2026-09-09

agentkitco Current

agentkitco-dependency-upgrade

Skillstore Score 78
Evidence Confidence Medium
Skillstore usage Unknown
Updated

2026-10-17

wshobson-dependency-upgrade

Skillstore Score 69
Evidence Confidence High
Skillstore usage 13
Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
91
Spec Compliance

What You Can Build

Maintain an application dependency

Upgrade one application package, trace changed APIs, and compare verification results with the baseline.

Prepare a framework migration

Review major-version migration notes, identify runtime requirements, and plan focused changes with an application smoke check.

Document a security maintenance update

Upgrade a dependency and cite security advisories only when confirmed by official advisories or release notes.

Try These Prompts

Inspect the upgrade target
Find the installed version of [package] from the lockfile and resolve the latest available version. Report both before making changes.
Plan the migration
Plan an upgrade of [package] from [current] to [target]. Review intermediate release notes, link breaking changes, and list affected files before editing.
Execute a focused upgrade
Upgrade [package] to [target]. Record baseline checks, update through the package manager, apply required migrations, and compare verification results. Ask before runtime changes.
Handle migration conflicts
Upgrade [package] to [target] with required peers only. Show transitive conflicts and options without overrides. Request approval for runtime or peer version increases.

Best Practices

  • Start with a clean working tree and record existing verification failures before upgrading.
  • Review every intervening release and cite source links for relevant breaking changes.
  • Keep changes focused and report skipped checks, remaining warnings, and rollback steps.

Avoid

  • Running a blanket dependency update or mixing the upgrade with unrelated refactoring.
  • Skipping failing tests or loosening version ranges to conceal incompatibilities.
  • Overriding transitive conflicts or increasing runtime requirements without review.

Frequently Asked Questions

Which AI tools can use this skill?
The listed tools are Claude, Codex, and Claude Code. Project edits and command execution require appropriate tool access.
Can it upgrade every dependency at once?
No. The workflow targets one dependency or a tightly coupled group, including required peers.
How does it determine the latest version?
It asks the package manager for available versions and states the exact target number before proceeding.
What happens when release notes are unavailable?
It reports the missing release notes and treats the upgrade as higher risk.
Does it automatically change runtime requirements?
No. It must stop and request confirmation before increasing minimum runtime or peer dependency versions.
Does it verify security advisory claims?
It names an advisory only when supported by an official advisory or release notes. It does not provide independent vulnerability scanning.

Developer Details

Author

agentkitco

License

MIT

Author version

v1.0

Skillstore revision

r1

Version notice

The author-declared version is not valid SemVer.

Ref

743429f75b17204d47661a86b577a575ad67517f

Maintenance freshness

10/17/2026

Usage

0 downloads ยท 0 views

File structure

๐Ÿ“„ SKILL.md

More from agentkitco

View all
View all