Menu
Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when running workspace tests, choosing a test command, or summarizing results before handoff to debugger.
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use when the user wants to install or customize cursorAssistant in the current project (GitHub install or configure).
Use when: running pre-commit or pre-push CI-equivalent checks in any workspace — discovers workflow commands with Cursor tools, filters for local executability, scopes to staged changes, and runs checks cheapest-first.
Use before proposing cursorAssistant setup, update, or repair — inspect lockfile and managed file drift.
Baseado na classificação ocupacional SOC
| name | depSearch |
| description | Use when: discovering package manifests, assessing dependency health, finding replacements, or confirming import usage before removal — discovery only; mutating installs are handled by the deps agent. |
| version | 1.2 |
| license | MIT |
| disable-model-invocation | true |
Discovery and research for dependency work. Use Glob, Read, Grep, Shell, and WebSearch/WebFetch. security MCP (query_osv, query_deps) only when that server is enabled in the workspace lockfile.
deps agent after user confirmationreviewGlob common manifests:
| Ecosystem | Patterns |
|---|---|
| Python | requirements*.txt, pyproject.toml, setup.py, Pipfile, uv.lock, poetry.lock |
| Node | package.json, package-lock.json, yarn.lock, pnpm-lock.yaml |
| Rust | Cargo.toml, Cargo.lock |
| Go | go.mod, go.sum |
| Ruby | Gemfile, Gemfile.lock |
| .NET | *.csproj, packages.config |
| JVM | pom.xml, build.gradle* |
Read each found file. Extract name, version/range, runtime vs dev, lockfile presence. If none found, stop.
Prefer security MCP query_deps when available.
| Ecosystem | Shell / web fallback |
|---|---|
| Python | pip index versions <pkg> or PyPI JSON |
| Node | npm view <pkg> version |
| Rust | cargo search <pkg> |
| Go | go list -m <mod>@latest |
| General | WebSearch for latest stable version |
Record: latest version, gap vs declared, license, maintenance (release within 12 months baseline).
Prefer query_osv when security MCP is enabled.
| Ecosystem | Fallback |
|---|---|
| Python | pip-audit |
| Node | npm audit |
| General | osv-scanner or WebSearch on osv.dev |
Flag CVSS ≥ 7 with a fix version first.
When abandoned or unfixable: WebSearch for maintained alternatives; compare with query_deps when available. Cite every recommendation.
Grep package name and import patterns (import, from) in source and tests. List evidence before proposing removal. Check transitive deps in lockfiles.