Skills dependency-upgrade

📦

dependency-upgrade

Name: dependency-upgrade
Author: sickn33

Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Plan Dependency Upgrades Safely

Dependency upgrades can break builds, tests, and runtime behavior. This skill helps plan staged upgrades, compatibility checks, testing, and rollback steps.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "dependency-upgrade" from https://skillstore.io/skills/sickn33-dependency-upgrade.md and its manifest at https://skillstore.io/api/skills/sickn33-dependency-upgrade/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-dependency-upgrade.md Signed manifest GET /api/skills/sickn33-dependency-upgrade/manifest Signed lockfile GET /api/skills/sickn33-dependency-upgrade/lockfile

Test it

Using "dependency-upgrade". Upgrade React 17 to React 18 in a production app.

Expected outcome:

Inventory React-related packages and peer dependencies.
Read migration notes and identify required rendering API changes.
Upgrade one group at a time, then run unit, integration, and build checks.
Deploy to staging with a rollback branch and monitoring plan.

Using "dependency-upgrade". Resolve dependency conflicts after updating testing libraries.

Expected outcome:

Group conflicts by package owner and required peer range.
Choose compatible versions before using force or legacy peer options.
Run focused tests for affected components and update lock files only after validation.

Using "dependency-upgrade". Create a safe policy for automated package updates.

Expected outcome:

Automerge trusted patch updates after tests pass.
Require review for minor updates that touch build or runtime packages.
Label major updates and schedule them for planned migration work.

Security Audit

Safe

v6 • 7/9/2026 Open versioned report

The static matches are documentation examples in SKILL.md, mostly Markdown code fences around npm, yarn, testing, and migration guidance. I found no prompt injection, credential collection, hidden exfiltration, or executable package scripts. The main residual concern is that examples include side-effecting commands that require user review.

Files scanned

430

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (43)

🌐 Network access (1)

SKILL.md:177

📁 Filesystem access (4)

SKILL.md:200 SKILL.md:214 SKILL.md:200 SKILL.md:214

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-dependency-upgrade/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-dependency-upgrade/security.svg)](https://skillstore.io/skills/sickn33-dependency-upgrade?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-dependency-upgrade?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-dependency-upgrade/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-dependency-upgrade.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). dependency-upgrade security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-dependency-upgrade/audits/6

BibTeX citation

@techreport{sickn33-sickn33-dependency-upgrade-2026,
  author = {sickn33},
  title = {dependency-upgrade security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/sickn33-dependency-upgrade/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "dependency-upgrade security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/sickn33-dependency-upgrade/audits/6"
identifiers:
  - type: other
    value: "skillstore:sickn33-dependency-upgrade:audit:6"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

sickn33 Recommended Current

sickn33-dependency-upgrade

Skillstore Score 78

Evidence Confidence High

Skillstore usage 12

Updated

2026-09-09

wshobson

wshobson-dependency-upgrade

Skillstore Score 69

Evidence Confidence High

Skillstore usage 12

Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan a Framework Migration

Create an incremental plan for a major framework upgrade with compatibility checks and rollback steps.

Reduce Vulnerable Dependencies

Review outdated or vulnerable packages and decide which updates need staged testing.

Set Up Update Automation

Design Renovate or Dependabot rules that separate low-risk updates from major changes.

Try These Prompts

List Current Upgrade Risks

Review my dependency list and identify outdated packages, likely breaking changes, and the safest first upgrade step.

Create a Staged Upgrade Plan

Build a staged upgrade plan for these dependencies. Include upgrade order, validation commands, rollback points, and expected code changes.

Analyze Peer Dependency Conflicts

Analyze these peer dependency warnings and propose compatible version ranges. Explain tradeoffs and testing needed before merging.

Design an Automated Upgrade Policy

Design a Renovate or Dependabot policy for this repository. Separate patch, minor, and major updates with review and testing rules.

Best Practices

Upgrade one major version at a time and test after each step.
Read changelogs and migration notes before changing version ranges.
Keep a rollback plan, baseline test results, and lock file changes under review.

Avoid

Upgrade all dependencies at once without a compatibility plan.
Ignore peer dependency warnings or rely on force options as a default.
Merge version changes without running tests and reviewing runtime impact.

Frequently Asked Questions

Does this skill run package manager commands automatically?

No. It provides command examples and planning guidance. Users should approve and run commands in the correct project context.

Which ecosystems does it cover best?

It focuses on JavaScript projects using npm, yarn, React, testing tools, Renovate, and Dependabot.

Can it help with security updates?

Yes. It includes audit and outdated package workflows, but users must validate fixes and application behavior.

Can it design a rollback plan?

Yes. It describes branch, test, lock file, and deployment rollback steps for dependency changes.

Does it replace project-specific testing?

No. It helps plan validation, but each project still needs its own test suite and staging checks.

Can it configure Renovate or Dependabot?

It provides patterns for update grouping, automerge rules, review labels, and update schedules.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/dependency-upgrade

Ref

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Maintenance freshness

7/18/2026

Usage

8 downloads · 140 views

File structure

📄 SKILL.md