CtrlK
BlogDocsLog inGet started
Tessl Logo

dependency-management

Manage third-party libraries, runtimes, and SaaS dependencies. Use this skill when setting an update cadence, responding to security advisories, dealing with deprecated dependencies, evaluating new dependencies, auditing what's installed, or unblocking a dependency upgrade. Triggers on dependency, package update, security patch, lockfile, deprecated, breaking change, supply chain, dependency audit, npm audit, dependabot, renovate. Also triggers when a build breaks after an update or when an advisory is published for a used package.

79

Quality

100%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

100%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A high-quality, well-structured skill body: concise, actionable, with a clearly sequenced workflow that includes validation checkpoints and well-organized progressive disclosure via one real reference file. No significant weaknesses.

DimensionReasoningScore

Conciseness

Lean and practical throughout; never explains basic concepts Claude already knows (what a library/lockfile is). Summary aphorisms ('Free packages aren't free.', 'Manual checking doesn't scale.') are punchy one-liners that earn their place rather than padding.

5 / 5

Actionability

Copy-paste-ready commands ('npm ls --all --json', 'npm audit', 'pip-audit', 'bundle audit', 'depcheck'), a concrete severity-vs-direct/indirect prioritization table, and explicit checklists for new-dep evaluation and removal give fully executable guidance across common cases.

5 / 5

Workflow Clarity

A clearly sequenced 8-step workflow with an explicit validation checkpoint (Step 4: 'Test before merging fixes' — run full suite, smoke-test staging, watch monitoring) and checklists for complex processes; the destructive/batch cap does not apply because validation is present.

5 / 5

Progressive Disclosure

Overview framework (categories, risk dimensions, workflow) lives inline in SKILL.md while the detailed procedural material is split to a single, clearly-signaled, one-level-deep reference (references/upgrade-checklist.md) that exists on disk; navigation is easy.

5 / 5

Total

20

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An excellent description: third-person, concrete actions, explicit 'Use when' and 'Triggers on' guidance, and a comprehensive set of natural trigger keywords including tool names. No meaningful gaps to penalize.

DimensionReasoningScore

Specificity

Lists multiple concrete actions ('setting an update cadence, responding to security advisories, dealing with deprecated dependencies, evaluating new dependencies, auditing what's installed, or unblocking a dependency upgrade'), giving comprehensive coverage of the skill's capabilities.

5 / 5

Completeness

Explicitly answers both what ('Manage third-party libraries, runtimes, and SaaS dependencies') and when ('Use this skill when...'; 'Triggers on...'; 'Also triggers when...') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Comprehensive natural trigger coverage including tool names users actually say ('npm audit, dependabot, renovate') plus domain terms ('lockfile, deprecated, breaking change, supply chain') and scenario triggers ('build breaks after an update').

5 / 5

Distinctiveness Conflict Risk

Clear niche (dependency/package management) with distinct, specific triggers; minimal conflict risk with adjacent skills, and the body even disambiguates against code-review-web, security-baseline, etc.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository
rampstackco/claude-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.