agentsclimarketplace

Dependency upgrade risk review

Skill alexzhu0/agent-ready-skills/skills/dependency-upgrade-risk-review

Ten practical AI-agent skills for turning messy work into clear context, evals, reviews, and launch-ready artifacts.

Install
npx -y skills add alexzhu0/agent-ready-skills --skill dependency-upgrade-risk-review

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Use when reviewing dependency upgrades, package-lock diffs, SDK version changes, release notes, or migration guides for breaking changes, security impact, tests, and rollout risk.

SKILL.md

1.4 KB, as published. Nobody here has run it

Dependency Upgrade Risk Review

Purpose

Assess whether a dependency upgrade is safe, risky, or needs a staged rollout.

Fit

  • Use when a dependency version change needs impact, test, and rollout review.
  • Do not use when choosing between unrelated packages; use a dependency-selection workflow instead.

Inputs

  • Current and target versions.
  • Changelog, release notes, migration guide, lockfile diff, or package manifest.
  • Local usage patterns and test coverage if available.

Workflow

  1. Identify version jump size and release date distance.
  2. Extract breaking changes, security fixes, deprecations, and runtime changes.
  3. Map changes to likely local usage.
  4. Recommend tests, canary scope, and rollback.
  5. Call out whether more source inspection is required.

Output

Produce Markdown with:

  • Upgrade Snapshot
  • Breaking Changes
  • Local Impact
  • Security And Maintenance Notes
  • Test Plan
  • Rollout Recommendation
  • Open Questions

Validation

  • Version numbers are exact.
  • Changelog claims are not mixed with guesses.
  • Test plan matches likely local impact.
  • Security fixes are visible.
  • Recommendation includes confidence and remaining unknowns.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.