This skill is responsible for managing the dependencies of the project. It ensures that all required packages are installed and up to date, and it can also handle the installation of new dependencies as needed.

Python

Avoid manually editing pyproject.toml or poetry.lock unless necessary, as this can lead to inconsistencies.

Adding Python dependencies

When adding or maintaining Python dependencies, follow these guidelines:

Check for any major issues on Socket.dev with a url like https://socket.dev/pypi/package/<package-name> before adding a new dependency. This will help you identify any potential problems with the package, such as security vulnerabilities or compatibility issues.
Tell the Developer about your assessment of the dependency based on your research, and if you have any concerns, ask them if they still want to add it.
Use uv add package-name to add a new dependency. This will ensure that the dependency is added to pyproject.toml and poetry.lock correctly.

Updating Python dependencies

When updating dependencies, follow these guidelines:

Use uv update package-name to ensure that the lock file is updated properly.

Remove Python dependencies

If you need to remove a dependency, use uv remove package-name to ensure that the dependency is removed from both pyproject.toml and poetry.lock correctly.

Más de este repositorio

mismo repositorio

openomb-spend-plan-fix

Protect-Democracy/openomb

Diagnose and fix a spend plan PDF that isn't parsing correctly. Takes a filename or URL and optional free-form agency/bureau hint, then diagnoses what's failing, explains the proposed fix, and applies it across load-file.ts, spend-plan-agency-match.ts, and the test file.

2026-07-093

tofu

Protect-Democracy/openomb

Use when doing infrastructure work.

2026-07-013

pd-github-action-version

Protect-Democracy/openomb

Use when updating or checking GitHub Action versions, when adding a new action to a workflow file, or when the Developer asks about action versions or SHA pins.

2026-07-013

pd-maintain-claude

Protect-Democracy/openomb

Audits and fixes the `.claude/` directory to ensure internal consistency, correct references, and adherence to project conventions.

2026-07-013

pd-security-check

Protect-Democracy/openomb

On-demand security review of code changes. Use when asked to "security check", "security review", "find vulnerabilities", "check for security issues", "audit security", or "OWASP review". Diff-aware, covers OWASP Top 10, supply chain, infrastructure, and agentic AI security with confidence-based reporting.

2026-07-013

pd-summarize-pr

Protect-Democracy/openomb

Generates a summary of a pull request based on the PR description and the code changes.

2026-07-013

name	pd-dependencies
description	Manages project dependencies, ensuring all required packages are installed and up to date.

Dependency management

Python

Avoid manually editing pyproject.toml or poetry.lock unless necessary, as this can lead to inconsistencies.

Adding Python dependencies

When adding or maintaining Python dependencies, follow these guidelines:

Check for any major issues on Socket.dev with a url like https://socket.dev/pypi/package/<package-name> before adding a new dependency. This will help you identify any potential problems with the package, such as security vulnerabilities or compatibility issues.
Tell the Developer about your assessment of the dependency based on your research, and if you have any concerns, ask them if they still want to add it.
Use uv add package-name to add a new dependency. This will ensure that the dependency is added to pyproject.toml and poetry.lock correctly.

Updating Python dependencies

When updating dependencies, follow these guidelines:

Use uv update package-name to ensure that the lock file is updated properly.

Remove Python dependencies

If you need to remove a dependency, use uv remove package-name to ensure that the dependency is removed from both pyproject.toml and poetry.lock correctly.