메뉴
Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | depSearch |
| description | Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent. |
| version | 1.2 |
| license | MIT |
| disable-model-invocation | true |
Discovery and research for dependency work. Use Glob, Read, Grep, Shell, and WebSearch/WebFetch. security MCP (query_osv, query_deps) only when that server is enabled in the workspace lockfile.
deps agent after user confirmationreviewGlob common manifests:
| Ecosystem | Patterns |
|---|---|
| Python | requirements*.txt, pyproject.toml, setup.py, Pipfile, uv.lock, poetry.lock |
| Node | package.json, package-lock.json, yarn.lock, pnpm-lock.yaml |
| Rust | Cargo.toml, Cargo.lock |
| Go | go.mod, go.sum |
| Ruby | Gemfile, Gemfile.lock |
| .NET | *.csproj, packages.config |
| JVM | pom.xml, build.gradle* |
Read each found file. Extract name, version/range, runtime vs dev, lockfile presence. If none found, stop.
Prefer security MCP query_deps when available.
| Ecosystem | Shell / web fallback |
|---|---|
| Python | pip index versions <pkg> or PyPI JSON |
| Node | npm view <pkg> version |
| Rust | cargo search <pkg> |
| Go | go list -m <mod>@latest |
| General | WebSearch for latest stable version |
Record: latest version, gap vs declared, license, maintenance (release within 12 months baseline).
Prefer query_osv when security MCP is enabled.
| Ecosystem | Fallback |
|---|---|
| Python | pip-audit |
| Node | npm audit |
| General | osv-scanner or WebSearch on osv.dev |
Flag CVSS ≥ 7 with a fix version first.
When abandoned or unfixable: WebSearch for maintained alternatives; compare with query_deps when available. Cite every recommendation.
Grep package name and import patterns (import, from) in source and tests. List evidence before proposing removal. Check transitive deps in lockfiles.
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use when the user wants to install or customize cursorAssistant in the current project (GitHub install or configure).
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use before proposing cursorAssistant setup, update, or repair — inspect lockfile and managed file drift.