القائمة
Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use when the user wants to install or customize cursorAssistant in the current project (GitHub install or configure).
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use before proposing cursorAssistant setup, update, or repair — inspect lockfile and managed file drift.
| name | depSearch |
| description | Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent. |
| version | 1.2 |
| license | MIT |
| disable-model-invocation | true |
Discovery and research for dependency work. Use Glob, Read, Grep, Shell, and WebSearch/WebFetch. security MCP (query_osv, query_deps) only when that server is enabled in the workspace lockfile.
deps agent after user confirmationreviewGlob common manifests:
| Ecosystem | Patterns |
|---|---|
| Python | requirements*.txt, pyproject.toml, setup.py, Pipfile, uv.lock, poetry.lock |
| Node | package.json, package-lock.json, yarn.lock, pnpm-lock.yaml |
| Rust | Cargo.toml, Cargo.lock |
| Go | go.mod, go.sum |
| Ruby | Gemfile, Gemfile.lock |
| .NET | *.csproj, packages.config |
| JVM | pom.xml, build.gradle* |
Read each found file. Extract name, version/range, runtime vs dev, lockfile presence. If none found, stop.
Prefer security MCP query_deps when available.
| Ecosystem | Shell / web fallback |
|---|---|
| Python | pip index versions <pkg> or PyPI JSON |
| Node | npm view <pkg> version |
| Rust | cargo search <pkg> |
| Go | go list -m <mod>@latest |
| General | WebSearch for latest stable version |
Record: latest version, gap vs declared, license, maintenance (release within 12 months baseline).
Prefer query_osv when security MCP is enabled.
| Ecosystem | Fallback |
|---|---|
| Python | pip-audit |
| Node | npm audit |
| General | osv-scanner or WebSearch on osv.dev |
Flag CVSS ≥ 7 with a fix version first.
When abandoned or unfixable: WebSearch for maintained alternatives; compare with query_deps when available. Cite every recommendation.
Grep package name and import patterns (import, from) in source and tests. List evidence before proposing removal. Check transitive deps in lockfiles.