Menu
Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use when the user wants to install or customize cursorAssistant in the current project (GitHub install or configure).
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use before proposing cursorAssistant setup, update, or repair — inspect lockfile and managed file drift.
| name | depSearch |
| description | Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent. |
| version | 1.2 |
| license | MIT |
| disable-model-invocation | true |
Discovery and research for dependency work. Use Glob, Read, Grep, Shell, and WebSearch/WebFetch. security MCP (query_osv, query_deps) only when that server is enabled in the workspace lockfile.
deps agent after user confirmationreviewGlob common manifests:
| Ecosystem | Patterns |
|---|---|
| Python | requirements*.txt, pyproject.toml, setup.py, Pipfile, uv.lock, poetry.lock |
| Node | package.json, package-lock.json, yarn.lock, pnpm-lock.yaml |
| Rust | Cargo.toml, Cargo.lock |
| Go | go.mod, go.sum |
| Ruby | Gemfile, Gemfile.lock |
| .NET | *.csproj, packages.config |
| JVM | pom.xml, build.gradle* |
Read each found file. Extract name, version/range, runtime vs dev, lockfile presence. If none found, stop.
Prefer security MCP query_deps when available.
| Ecosystem | Shell / web fallback |
|---|---|
| Python | pip index versions <pkg> or PyPI JSON |
| Node | npm view <pkg> version |
| Rust | cargo search <pkg> |
| Go | go list -m <mod>@latest |
| General | WebSearch for latest stable version |
Record: latest version, gap vs declared, license, maintenance (release within 12 months baseline).
Prefer query_osv when security MCP is enabled.
| Ecosystem | Fallback |
|---|---|
| Python | pip-audit |
| Node | npm audit |
| General | osv-scanner or WebSearch on osv.dev |
Flag CVSS ≥ 7 with a fix version first.
When abandoned or unfixable: WebSearch for maintained alternatives; compare with query_deps when available. Cite every recommendation.
Grep package name and import patterns (import, from) in source and tests. List evidence before proposing removal. Check transitive deps in lockfiles.