agentsclimarketplace

Dependency upgrade

Skill NSBen/skillfoundry/src/skillfoundry/data/starter_skills/dependency-upgrade

🔥 SkillFoundry (forge) — open, vendor-neutral toolchain for authoring, validating, testing & publishing AI agent skills. Works across Claude Code / Cursor / Codex / OpenCode / Cline. Ships 15 starter skills.

Install
npx -y skills add NSBen/skillfoundry --skill dependency-upgrade

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 13 days oldThe repository was created 13 days ago. New is not bad, but a brand new repository carrying a familiar-sounding name is the shape a typosquat arrives in, and there has been no time for anyone else to find a problem with it.
  • 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Use when a dependency is outdated or has a known vulnerability and you need to upgrade it safely with the right changelog and migration notes.

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

1.2 KB, as published. Nobody here has run it

Dependency Upgrade

When to use

Use this skill when npm audit, pip-audit, or a version check flags an outdated or vulnerable dependency.

Steps

  1. Identify the current and latest versions and whether the bump is major.
  2. Read the release notes / changelog for breaking changes between the two.
  3. Check the project's lockfile and peer/version constraints.
  4. Apply the upgrade, then run the test suite and the build.
  5. Summarize the changes, risks, and any code edits the migration requires.

Examples

  • "Upgrade requests to the latest secure version"
  • "Is this major bump of react safe?"

References

Prefer minimal, reviewed bumps; for majors, isolate the upgrade in its own PR so regressions are easy to bisect.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.