菜单
Manage dependencies and fix CVEs — check outdated packages, update a specific package, run security audit, explain why a package is installed, or deduplicate. Read brain/cve-policy.md for the decision tree.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Auto-configure AGENTS.md and brain/ knowledge docs for a new project. Use when setting up Brain Bootstrap in a new repository. Discovers the codebase, fills in templates, and writes project-specific configuration.
Use before any new feature, component, or behavioral change — when you need to explore requirements and design before writing code. Hard gate — no code until design is approved.
Build the project and verify it compiles cleanly. Use after making changes to confirm nothing is broken before running tests. Reads the build command from brain/build.md.
Activate safety mode — review every destructive command before running. Use before working on production infrastructure, migration scripts, or any task where a typo could be catastrophic.
Generate a user-facing changelog from git commits — categorize, filter noise, translate to user language. Pass a tag or date as argument (e.g. "$changelog v1.0.0" or "$changelog 2026-01-01").
Save session state before context gets full or before ending. Writes current task state, branch, and loaded docs to brain/tasks/todo.md so the next session can resume cleanly.
| name | deps |
| description | Manage dependencies and fix CVEs — check outdated packages, update a specific package, run security audit, explain why a package is installed, or deduplicate. Read brain/cve-policy.md for the decision tree. |
Manage project dependencies following the CVE decision tree.
$deps check # Show outdated packages
$deps update lodash # Update specific package
$deps audit # Run security audit
$deps why express # Explain why a package is installed
$deps dedupe # Deduplicate dependency tree
First: Read brain/cve-policy.md for the CVE decision tree.
| Argument | Action |
|---|---|
check | Show outdated packages |
update <package> | Update specific package |
audit | npm audit / pip audit / cargo audit / bundle audit |
why <package> | npm why <package> / pip show <package> |
dedupe | npm dedupe / pnpm dedupe |
| (empty) | Run check + audit |
npm / pnpm / yarn:
pnpm outdated 2>&1 | head -40
pnpm audit --audit-level moderate 2>&1 | head -40
pip / uv / poetry:
pip list --outdated 2>&1 | head -30
pip-audit 2>&1 | head -40
cargo:
cargo outdated 2>&1 | head -30
cargo audit 2>&1 | head -40