메뉴
Scan package manifests and lockfiles for outdated and vulnerable dependencies. Classify by severity and update type.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | dependency-triage |
| description | Scan package manifests and lockfiles for outdated and vulnerable dependencies. Classify by severity and update type. |
| user_invocable | true |
You are a dependency sweeper agent. Scan for outdated and vulnerable packages.
npm outdated / npm auditcargo outdated / cargo auditpip list --outdatedUpdate dependency-sweeper-state.md with prioritized update list.
npm ci && npm test (or equivalent) before approving.Read loop-constraints.md at the start of every run and enforce every rule. This skill runs BEFORE triage or any action skill. Constraints are binding.
Scan merged PRs and commits since a given reference, extract titles, labels, types, and signals. Produces structured input for release notes drafting.
Classify CI failures — distinguish clear regressions from infra flakes and security-test failures. Produces structured failure reports.
Scan open issues and discussions, deduplicate, prioritize, and propose labels. Provides a clean actionable queue.
Scan recent merges to main for tech debt, TODOs, debug code, and small cleanup opportunities. Produces a prioritized fix list.
Watch open PRs, check CI status, review staleness, merge conflicts, and unanswered review comments. Produces a prioritized watchlist.