CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

framework-migration-deps-upgrade

You are a dependency management expert specializing in safe, incremental upgrades of project dependencies. Plan and execute dependency updates with minimal risk, proper testing, and clear migration pa

40

Quality

51%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/AI-Agents-Safe-Coding-Skills/skills/framework-migration-deps-upgrade/SKILL.md

The canonical home for this skill is framework-migration-deps-upgrade in rmyndharis/antigravity-skills

SKILL.md
Quality
Evals
Security

Quality

Content

36%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a generic template: it names sensible output deliverables but provides no concrete, executable guidance for actually performing a dependency upgrade, and its single reference file is missing from the bundle. Validation and rollback are mentioned only as report headings, never as operational steps.

Suggestions

Replace the generic Instructions bullets with a concrete upgrade sequence, e.g.: inventory outdated packages, upgrade one at a time (lockfile-aware commands per ecosystem), run the test suite after each bump, and roll back on failure.

Fix the progressive-disclosure defect: either create resources/implementation-playbook.md or remove the reference, and align the path with the actual bundle layout (no resources/ directory exists).

Add explicit validation checkpoints (run tests/lint/build after each upgrade, revert the single failing bump) so the workflow has the feedback loops this batch/risky operation requires.

DimensionReasoningScore

Conciseness

The body is short and sectioned, but it contains boilerplate filler that adds nothing Claude does not already know: 'Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes. Provide actionable steps and verification.' and a closing sentence that restates the description ('Focus on safe, incremental upgrades that maintain system stability...'). Mostly efficient, but several generic passages could be cut.

3 / 5

Actionability

There is no executable guidance anywhere: no commands (e.g., npm outdated, npm-check-updates, pip list --outdated, lockfile regeneration), no concrete upgrade procedure, and no example of a migration or rollback step. The Output Format names deliverables (Priority Matrix, Compatibility Report, Rollback Plan) which are high-level hints, matching the anchor 'minimal concrete guidance; high-level hints but missing the specific steps to execute' rather than score 1, since the deliverable list does give concrete structure to the output.

2 / 5

Workflow Clarity

The Instructions are unordered generic bullets, not a sequence, and there are no validation checkpoints despite this being a batch/risky operation class (upgrading dependencies across a project), where feedback loops matter. This sits between the score-1 anchor (steps missing, no validation) and score-2 anchor (rough framing, gaps, validation absent): a rough clarify-then-apply flow is implied, so 2 fits best, and the missing-validation cap rules out anything above 3 regardless.

2 / 5

Progressive Disclosure

The body is appropriately short with clear sections and points to a single one-level-deep reference ('resources/implementation-playbook.md' mentioned in both Instructions and Resources), which is the right disclosure pattern. However, the referenced file does not exist in the bundle (no resources/, references/, scripts/, or assets/ directories are present), so the pointer is broken and navigation leads nowhere. This matches 'some structure but could be better organized; references present but' non-functional, rather than score 4 where references would mostly work.

3 / 5

Total

10

/

20

Passed

Description

45%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description communicates a clear domain and purpose but is undermined by second-person voice, an apparent truncation, and the complete absence of 'Use when...' trigger guidance. It reads as a generic capability statement rather than a well-triggered skill description.

Suggestions

Rewrite in third person, e.g.: 'Plans and executes safe, incremental project dependency upgrades with risk assessment, automated testing, and rollback strategies.'

Add an explicit trigger clause: 'Use when the user asks to upgrade or update dependencies, fix outdated packages, or handle breaking changes from a version bump.'

Restore the truncated text and include concrete trigger terms users actually say (e.g., 'update packages', 'outdated dependencies', 'breaking changes', ecosystem names like npm/pip/cargo).

DimensionReasoningScore

Specificity

The description names the domain ('safe, incremental upgrades of project dependencies') and only two generic actions ('Plan and execute dependency updates'), which is a score-3 fit, but it is written in second person ('You are a dependency management expert'), which the judging guidelines penalize by one point. It also appears truncated mid-phrase ('clear migration pa'), losing a concrete capability.

2 / 5

Completeness

The 'what' is clear (plan and execute dependency updates with minimal risk, proper testing), but there is no 'Use when...' clause or any explicit trigger guidance, which caps completeness at 3 per the judging guidelines. The truncation ('migration pa') further weakens the stated capability.

3 / 5

Trigger Term Quality

It includes some relevant keywords ('dependency', 'upgrades', 'dependency updates', 'migration') but misses the natural phrases and synonyms users would say, such as 'update packages', 'outdated dependencies', 'breaking changes', or ecosystem-specific terms like npm/pip/cargo. This matches the anchor for having some relevant keywords while missing common variations.

3 / 5

Distinctiveness Conflict Risk

Dependency upgrades is a somewhat specific niche, but the description gives no distinct trigger phrases, so it could overlap with general package-management, build-tooling, or security-patching skills. This matches the anchor 'somewhat specific but could still overlap with similar skills' rather than score 4, which would require clearly distinct triggers.

3 / 5

Total

11

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

plugins/AI-Agents-Safe-Coding-Skills/skills/framework-migration-deps-upgrade/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.