📦
session-handoff
78Create Clear Agent Session Handoffs
Long sessions and agent switches can lose decisions, test results, and unfinished work. This skill creates a concise HANDOFF.md with verified state and actionable next steps.
ドキュメント 表示
スキル dependency-upgrade
📦
dependency-upgrade
v1.0 コンテンツリビジョン r1 安全 ⚙️ 外部コマンド
Upgrade Dependencies With Focused Migration Checks
Dependency upgrades can introduce breaking changes and obscure existing failures. This skill guides focused migrations through release notes, baseline comparisons, minimal edits, and rollback reporting.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "dependency-upgrade" from https://skillstore.io/skills/agentkitco-dependency-upgrade.md and its manifest at https://skillstore.io/api/skills/agentkitco-dependency-upgrade/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「dependency-upgrade」を使用しています。 Show an example planning report for a major dependency upgrade.
期待される結果:
- Illustrative plan: confirm the installed version from the lockfile and select an explicit target.
- Review intervening release notes and list affected API usages with file references.
- Record baseline checks before changes and request approval for required runtime or peer upgrades.
- Report verification differences and a rollback option after implementation.
「dependency-upgrade」を使用しています。 Show an example response when an upgrade requires an unapproved runtime change.
期待される結果:
- Illustrative status: paused pending approval for the required runtime change.
- Present the documented minimum runtime and explain why it expands the requested scope.
- Ask whether to approve the runtime change or consider another target version.
- Identify checks not completed and avoid claiming the migration passed.
セキュリティ監査
安全v2 • 2026/10/22 バージョン別レポートを開く
All five static findings are false positives involving Markdown backticks, routine package version queries, code search, and rollback documentation. No evidence found of malicious intent, credential access, data exfiltration, or prompt injection in SKILL.md.
1
スキャンされたファイル
48
解析済み行数
0
レビュー項目
0
誤検知を無視
リスク要因
⚙️ 外部コマンド (4)
最新の完了済み静的・セマンティック監査では、確認済みのセキュリティ検出事項は見つかりませんでした。これは、スキルに副作用がないことを証明するものではありません。
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/agentkitco-dependency-upgrade?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-dependency-upgrade/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/agentkitco-dependency-upgrade.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
agentkitco. (2026). dependency-upgrade security audit report (audit version 2) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2BibTeX形式の引用
@techreport{agentkitco-agentkitco-dependency-upgrade-2026,
author = {agentkitco},
title = {dependency-upgrade security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2},
note = {Author version 1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "dependency-upgrade security audit report (audit version 2)"
version: "1.0"
type: report
authors:
- name: "agentkitco"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/agentkitco-dependency-upgrade/audits/2"
identifiers:
- type: other
value: "skillstore:agentkitco-dependency-upgrade:audit:2"
description: "Skillstore immutable audit report identifier"
バリアントを比較
インストール可能なバリアント 3 件各作者のスキルは個別のインストール項目として維持されます。推奨バリアントは Skillstore の証拠で順位付けされます。
このバリアントが首位の理由
証拠の信頼度が高い
作者 / ソース Skillstore スコア 証拠の信頼度 Skillstore 利用状況 更新済み
agentkitco 現在
agentkitco-dependency-upgrade
Skillstore スコア 78
証拠の信頼度 中
Skillstore 利用状況 6
更新済み
2026-10-22
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Update an application library
Inspect release notes, identify affected APIs, update one package, and compare project checks against the baseline.
Prepare a framework migration
Map major-version changes, identify runtime and peer requirements, and request approval before expanding the upgrade scope.
Document a security-related upgrade
Upgrade an affected dependency and cite an advisory only when official documentation supports the security claim.
これらのプロンプトを試す
Inspect an upgrade target
Check the installed version of [package] and identify the latest release. Summarize relevant release notes without changing files.
Perform a focused upgrade
Upgrade [package] to [target version]. Record baseline checks, review release notes, update affected code, and compare verification results.
Plan a major migration
Plan the migration of [framework] from [current version] to [target version]. Map breaking APIs and request approval for runtime or peer changes.
Resolve conflicts with evidence
Investigate [package] upgrade conflicts without overriding dependency constraints. Present conflict output, options, official advisory evidence if applicable, verification gaps, and rollback guidance.
ベストプラクティス
- Start with a clean working tree and record existing failures before changing dependencies.
- Use the project package manager for manifest and lockfile updates, and cite release notes for applicable changes.
- Compare verification results with the baseline and document skipped checks, remaining warnings, and rollback steps.
回避
- Running a blanket dependency update when the request concerns one package.
- Combining an upgrade with unrelated refactoring or changing runtime requirements without approval.
- Skipping failing tests, loosening version ranges, or overriding conflicts to conceal compatibility problems.
よくある質問
Which assistants can use this skill?
The listing supports Claude, Codex, and Claude Code. Practical execution requires repository access and the tools needed for the project.
Does this skill include an automated upgrade script?
No. It contains a Markdown workflow that guides an assistant through planning, edits, verification, and reporting.
Can it upgrade multiple dependencies together?
It focuses on one dependency or a tightly coupled group, including required peers. It explicitly rejects blanket updates.
What happens when release notes are missing?
The workflow requires stating that release notes are unavailable and treating the upgrade as higher risk.
Will it change runtime requirements automatically?
No. It requires stopping and asking before changing minimum runtime or peer versions.
Can it prove that an upgrade fixes a vulnerability?
It permits security claims only when supported by an official advisory or release notes. It does not provide an independent vulnerability scanner.
開発者情報
作成者
agentkitcoライセンス
MIT
作者バージョン
v1.0
Skillstore リビジョン
r1
バージョンに関する注意
作者が宣言したバージョンは有効な SemVer ではありません。
参照
18efac79a818d7e997295839638fdd21906cfd1c
メンテナンスの新しさ
2026/10/22
利用状況
5 ダウンロード · 0 閲覧
ファイル構成
📄 SKILL.md
agentkitco のその他のスキル
すべて表示📦
security-quick-review
78Review Code Changes for Security Risks
Code changes can introduce security problems that routine reviews miss. This skill guides focused AI triage with evidence, realistic severity, and concrete fixes.
セキュリティ＆コンプライアンス 表示
📦
review-my-diff
78Review Your Diff Before Opening a Pull Request
Local changes can hide bugs, security gaps, and missing tests before human review. This skill guides an evidence-based review with prioritized findings and explicit verification results.
コーディング＆開発 表示
📦
repro-first-debugging
78Debug Bugs With Reproducible Evidence
Speculative fixes can hide causes and leave bugs unresolved. This skill guides assistants through reproduction, hypothesis testing, focused changes, and evidence-based verification.
コーディング＆開発 表示
📦
safe-refactor
78Refactor Code with Tests and Small Changes
Code cleanup can introduce behavior changes that are difficult to detect. This skill guides small refactoring steps with baseline tests, dependency checks, and repeated verification.
コーディング＆開発 表示
📦
prove-it-ran
78Verify Tests Ran Before Reporting Completion
Passing claims can hide skipped tests, stale results, or checks that never exercised a change. This skill guides fresh verification and evidence-based completion reports.
コーディング＆開発 表示
関連スキル
すべて表示📦
testing
85建構可靠的測試自動化
作成者 89jobrien
薄弱的測試會拖慢發布並掩蓋回歸問題。此技能可引導測試策略、TDD、自動化、覆蓋率審查，以及 Playwright 網頁檢查。
コーディング＆開発 表示
📦
testing-patterns
81在整個程式碼庫中規劃可靠測試
作成者 0xDarkMatter
這項技能協助團隊選擇測試策略、mock、資料 fixture、覆蓋率 gate 和 CI 模式，而不混淆測試範圍。它為 Claude、Codex 和 Claude Code 提供針對單元、整合、端對端、TDD 與管線測試的結構化指引。
コーディング＆開発 表示
📦
systematic-debugging
81有系統地偵錯軟體問題
作成者 Asmayaseen
缺乏結構的錯誤修復會浪費時間，並可能掩蓋真正的失敗原因。此技能會引導 Claude、Codex 和 Claude Code 進行以證據為基礎的根本原因分析。
コーディング＆開発 表示
📦
golang-testing
81建構更好的 Go 測試
作成者 89jobrien
Go 團隊需要在單元、整合、mock、基準測試和覆蓋率方面維持一致的測試。此 skill 提供 Claude、Codex 和 Claude Code 可在開發期間套用的實用 Go 測試模式。
コーディング＆開発 表示
📦
waterfall-development
81強制執行瀑布式階段關卡
作成者 Chemiseblanc
AI coding 工作階段在壓力升高時，可能會跳過需求、設計或測試。此技能會透過有文件記錄的關卡，讓工作維持在嚴格的瀑布式流程內。
コーディング＆開発 表示
📦
tdd-pytest
81使用 pytest TDD 建置 Python 測試
作成者 89jobrien
Python 團隊經常需要一致的測試、覆蓋率和報告，同時不失去 TDD 紀律。此技能為 Claude、Codex 和 Claude Code 提供以 pytest 為核心的工作流程、範例與報告指南。
コーディング＆開発 表示