CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

dependency-upgrade

Manage major dependency version upgrades with compatibility analysis, staged rollout, and comprehensive testing. Use when upgrading framework versions, updating major dependencies, or managing breaking changes in libraries.

78

1.05x
Quality

75%

Does it follow best practices?

Impact

91%

1.05x

Average score across 3 eval scenarios

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./plugins/framework-migration/skills/dependency-upgrade/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

56%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is command-dense and reasonably well-structured, with a genuinely staged workflow including rollback. It is dragged down by stub code in its most important sections, a semver primer that teaches Claude what it already knows, and a monolithic layout with no reference files for version-sensitive detail.

Suggestions

Complete or delete the stub code blocks: give checkCompatibility() a real implementation, write out the peer-dependency test body, and re-fence rollback.sh as bash instead of javascript.

Remove the 'Semantic Versioning Review' section — Claude already knows ^/~ semantics — and move the hardcoded React 16/17/18 compatibility matrix into a reference file (e.g. references/compatibility-matrix.md) where version rot is contained.

Move the Renovate and Dependabot configuration examples into a references/automation.md file, keeping only a brief pointer plus one illustrative snippet in SKILL.md.

DimensionReasoningScore

Conciseness

Mostly commands and code with little prose, but the 'Semantic Versioning Review' section re-explains ^/~/exact pinning — concepts Claude already knows — and the hardcoded React 16/17/18 compatibility matrix is time-sensitive detail that does not belong in the main file. Not 4 because these padded sections are more than minor trimmings.

3 / 5

Actionability

Much is executable (npm/jscodeshift/renovate commands), but key blocks are stubs: checkCompatibility() has only a comment body, the peer-dependency test says '// Run npm ls and check for warnings', and rollback.sh is fenced as JavaScript. The incomplete pieces sit precisely where the description promises capability, so this is more than minor gaps — yet not 2 since most guidance is genuinely runnable.

3 / 5

Workflow Clarity

The staged strategy gives a clear Planning → Incremental Updates → Validation sequence with test/build checkpoints after each step and a rollback script gated on 'if npm run test', so the batch-operation validation cap does not apply. Not 5 because there is no explicit fix-and-retry loop when a step's tests fail mid-phase, only the end-of-script rollback.

4 / 5

Progressive Disclosure

Good section headers in a single ~360-line file, but no references at all: the version-specific compatibility matrix and the Renovate/Dependabot configuration details are exactly the content that belongs in separate one-level-deep reference files. Not 4 because content that should be split is fully inlined; not 2 because the file is well-sectioned and navigable.

3 / 5

Total

13

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with a clear what/when structure and natural trigger phrases. Its main weakness is that the capability verbs ('compatibility analysis', 'staged rollout', 'comprehensive testing') are moderately generic rather than concrete, and it lacks synonyms like 'bump' or 'migrate'.

DimensionReasoningScore

Specificity

Names the domain and several actions ('compatibility analysis, staged rollout, and comprehensive testing'), but these verb phrases are more generic than anchor-5's concrete operations like 'extract text, fill forms, merge documents' — 'comprehensive testing' in particular is padding-adjacent.

4 / 5

Completeness

Explicitly answers both: the first sentence states what it does ('Manage major dependency version upgrades with compatibility analysis, staged rollout, and comprehensive testing') and the 'Use when...' clause gives concrete trigger phrases. Not below 5 since both are clearly and explicitly present.

5 / 5

Trigger Term Quality

'upgrading framework versions', 'updating major dependencies', and 'managing breaking changes' are natural user phrases, but common variations like 'bump dependencies', 'migrate to a new version', or tool names (npm, yarn) are missing, so coverage is good rather than comprehensive.

4 / 5

Distinctiveness Conflict Risk

'major dependency version upgrades' and 'breaking changes' carve a clear niche with distinct triggers, but there is minor overlap risk with general package-management or testing skills. Not 5 because phrases like 'comprehensive testing' could pull in adjacent skills; not 3 because the trigger set is firmly specific to major-version upgrades.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

wshobson/agents

Path

plugins/framework-migration/skills/dependency-upgrade/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.