CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

review-deps

Use when auditing the monorepo's dependencies — every workspace package.json — for version drift between workspaces and for upgrades available on npm. Finds the packages whose declared ranges disagree, checks the registry for newer versions, classifies each upgrade against the waiting-period rules, reads the changelogs of the ready ones, and reports the package.json changes to make.

72

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security

Quality

Content

88%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, highly actionable runbook: concrete commands for every step, explicit degradation paths when the network or user is absent, and multiple verification gates around the destructive apply step. Remaining improvements are cosmetic — trimming a few rhetorical asides and optionally splitting the report template or changelog protocol into reference files.

DimensionReasoningScore

Conciseness

Dense, command-first content with no explanation of concepts Claude already knows; only minor rhetorical padding ("a guess dressed as a fact", "an empty section is the good case; an absent one claims everything ran") could be trimmed without losing the behavioral guardrails, fitting the efficient-with-minor-trimmables anchor rather than the every-token-earns-its-place anchor 5.

4 / 5

Actionability

Fully executable throughout: the find/jq collector pipeline, the drift-detection one-liner, `bun outdated --filter '*'`, the registry WebFetch naming exactly which two fields to read, a verbatim report heredoc, and closing grep verification commands — copy-paste ready and covering the common cases including the degraded no-network run.

5 / 5

Workflow Clarity

Steps 0–7 are clearly sequenced with explicit validation checkpoints: upfront network/dependency probing, a confirmation gate before editing any package.json, `bun install --frozen-lockfile` verification, `bun run typecheck`, the advisory-is-a-stop rule for `bun audit`, and a final heading-count check; feedback loops are present for a batch/destructive operation, matching the anchor-5 example pattern.

5 / 5

Progressive Disclosure

Well-organized single-file skill with clear section headers and no nested or buried references, but at ~135 lines some self-contained material (the report template, the changelog-reading protocol) could be split into reference files; the no-bundle-needed simple-skill exception applies only under 50 lines, so this fits the good-structure-with-minor-gaps anchor rather than 5.

4 / 5

Total

18

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: third-person, action-dense, with an explicit "Use when" clause naming two distinct trigger conditions. The only weakness is slightly thin synonym coverage of natural user phrasings for dependency staleness.

Suggestions

Add natural synonyms users would actually say, such as "outdated", "stale", or "bump/update dependencies", to the trigger clause.

Mention "lockfile" or "bun install" in the description so lockfile-touching runs also surface this skill.

DimensionReasoningScore

Specificity

Lists five concrete, third-person actions covering the full pipeline — "Finds the packages whose declared ranges disagree", "checks the registry for newer versions", "classifies each upgrade against the waiting-period rules", "reads the changelogs of the ready ones", "reports the package.json changes to make" — matching the anchor for comprehensive, specific coverage; score 4 would require minor gaps in coverage, which are absent.

5 / 5

Completeness

Explicitly answers both questions: "Use when auditing the monorepo's dependencies ... for version drift between workspaces and for upgrades available on npm" states when with two concrete trigger conditions, and the action sentences fully state what; this matches anchor 5 rather than 4 because the when-clause is explicit and specific, not merely serviceable.

5 / 5

Trigger Term Quality

Good natural-keyword coverage — "auditing", "dependencies", "monorepo", "package.json", "version drift", "upgrades available on npm", "changelogs" — but misses common user phrasings like "outdated", "stale", or "bump/update dependencies", so it fits the good-but-not-comprehensive anchor rather than the synonym-and-extension-complete anchor 5.

4 / 5

Distinctiveness Conflict Risk

Clear niche — monorepo workspace version drift plus npm upgrade eligibility under waiting-period rules — with distinct triggers and minimal overlap risk with generic package-update skills.

5 / 5

Total

19

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

referenced_paths_exist

Referenced path issues: 1 missing

Warning

Total

15

/

16

Passed

Repository

englishstreetventures/osn

Path

.claude/skills/review-deps/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.