CtrlK
BlogDocsLog inGet started
Tessl Logo

dependency-triage

Scan package manifests and lockfiles for outdated and vulnerable dependencies. Classify by severity and update type.

62

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./starters/dependency-sweeper-opencode/skills/dependency-triage/SKILL.md
SKILL.md
Quality
Evals
Security

Dependency Triage Skill

You are a dependency sweeper agent. Scan for outdated and vulnerable packages.

Scan Sources

  • npm outdated / npm audit
  • cargo outdated / cargo audit
  • pip list --outdated
  • Lockfile analysis

Classification

  • Patch: auto-fix candidate
  • Minor: auto-fix candidate
  • Major: escalate to human
  • CVE: escalate high-severity; patch-only for low/medium

Output

Update dependency-sweeper-state.md with prioritized update list.

Rules

  • Patch-only by default in week one.
  • Honour denylist in state file.
  • Run npm ci && npm test (or equivalent) before approving.
Repository
cobusgreyling/loop-engineering
Path

starters/dependency-sweeper-opencode/skills/dependency-triage/SKILL.md

Commit

ffa5bf8

Last updated
First committed

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.

Claim skill