Skills add-dependency
📦

add-dependency

Content revision r2 Safe ⚙️ External commands

Add Gradle Dependencies with Approval

Adding libraries without review can create version drift and unnecessary maintenance. This skill guides approval, version discovery, catalog updates, and build verification.

Supports: Claude Codex Code(CC)
🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "add-dependency" from https://skillstore.io/skills/anysoftkeyboard-add-dependency.md and its manifest at https://skillstore.io/api/skills/anysoftkeyboard-add-dependency/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/anysoftkeyboard-add-dependency.md Signed manifest GET /api/skills/anysoftkeyboard-add-dependency/manifest Signed lockfile GET /api/skills/anysoftkeyboard-add-dependency/lockfile

Test it

Using "add-dependency". Add Retrofit for a new HTTP API client.

Expected outcome:

  • Retrofit is justified for typed HTTP APIs, while the current project lacks equivalent networking support.
  • Approval is requested before any repository files are changed.
  • After approval, the stable version and library alias are added to the catalog, followed by build verification.

Using "add-dependency". Add WorkManager and verify the Android application build.

Expected outcome:

  • Existing scheduling options are reviewed before recommending WorkManager.
  • The current stable release is confirmed, then the version catalog is updated after approval.
  • The relevant Android build completes and the dependency resolves successfully.

Security Audit

Safe
v10 • 7/23/2026 Open versioned report

All seven detections are false positives caused by Markdown formatting or benign prose. The executable example is a fixed Gradle build command without dynamic input. No prompt injection or malicious intent was found.

1
Files scanned
42
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (6)
SKILL.md:20 SKILL.md:24 SKILL.md:26-32 SKILL.md:32-37 SKILL.md:37-41 SKILL.md:41
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/anysoftkeyboard-add-dependency/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/anysoftkeyboard-add-dependency/security.svg)](https://skillstore.io/skills/anysoftkeyboard-add-dependency?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/anysoftkeyboard-add-dependency?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/anysoftkeyboard-add-dependency/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/anysoftkeyboard-add-dependency.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

AnySoftKeyboard. (2026). add-dependency security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/anysoftkeyboard-add-dependency/audits/10

BibTeX citation

@techreport{anysoftkeyboard-anysoftkeyboard-add-dependency-2026, author = {AnySoftKeyboard}, title = {add-dependency security audit report (audit version 10)}, institution = {Skillstore}, year = {2026}, number = {10}, url = {https://skillstore.io/skills/anysoftkeyboard-add-dependency/audits/10}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "add-dependency security audit report (audit version 10)" version: "unspecified" type: report authors: - name: "AnySoftKeyboard" date-released: "2026-07-23" url: "https://skillstore.io/skills/anysoftkeyboard-add-dependency/audits/10" identifiers: - type: other value: "skillstore:anysoftkeyboard-add-dependency:audit:10" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Add an Android Library

Introduce a stable Android library through the shared version catalog and verify the affected build.

Review a Dependency Proposal

Compare a proposed library with existing solutions before approving repository changes.

Standardize Automated Changes

Guide an AI coding tool through a consistent approval and verification process.

Try These Prompts

Add One Library 
Add [library] to this Gradle project. Explain why it is needed and ask for approval before changing files.
Compare Alternatives 
Evaluate [library] against [alternative]. Recommend whether to add it, verify the latest stable version, then wait for approval.
Update the Version Catalog 
Add [group]:[artifact] through gradle/libs.versions.toml after approval. Use clear aliases, then run the relevant Gradle build task.
Audit and Implement 
Audit this dependency for necessity, maintenance, compatibility, and catalog consistency. Compare alternatives, obtain approval, implement it, and verify the affected build.

Best Practices

  • Confirm the dependency is necessary and discuss alternatives before requesting approval.
  • Verify the stable version from authoritative sources because search results can be stale.
  • Run the narrowest relevant Gradle task after updating the version catalog.

Avoid

  • Do not edit project files before explicit approval unless autonomous changes were already approved.
  • Do not hardcode dependency versions in Gradle build files.
  • Do not select prerelease or dynamic versions when a stable release is required.

Frequently Asked Questions

Does this skill add dependencies without approval?
No. It requests user approval before modifying files unless autonomous changes were already approved.
Which projects are supported?
It targets Gradle projects that manage dependencies through gradle/libs.versions.toml.
How does it choose a version?
It directs a web search for the latest stable version before updating the catalog.
Does it check dependency security?
No. License, vulnerability, provenance, and supply-chain checks require separate tools or review.
How is the change verified?
It runs a relevant Gradle build or sync task and checks whether dependency resolution succeeds.
Can it place versions in build.gradle.kts?
No. The workflow requires versions and library aliases in the shared version catalog.

Developer Details

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/AnySoftKeyboard/janus/tree/main/.claude/skills/add-dependency

Ref

89edfdc710d0846129dcee6a929477b04f08052c

Maintenance freshness

7/24/2026

Usage

6 downloads · 187 views

File structure

📄 SKILL.md

More from AnySoftKeyboard

View all

Related Skills

View all