菜单
Scan package manifests and lockfiles for outdated and vulnerable dependencies. Classify by severity and update type.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Read loop-constraints.md at the start of every run and enforce every rule. This skill runs BEFORE triage or any action skill. Constraints are binding.
Scan merged PRs and commits since a given reference, extract titles, labels, types, and signals. Produces structured input for release notes drafting.
Classify CI failures — distinguish clear regressions from infra flakes and security-test failures. Produces structured failure reports.
Scan open issues and discussions, deduplicate, prioritize, and propose labels. Provides a clean actionable queue.
Scan recent merges to main for tech debt, TODOs, debug code, and small cleanup opportunities. Produces a prioritized fix list.
Watch open PRs, check CI status, review staleness, merge conflicts, and unanswered review comments. Produces a prioritized watchlist.
| name | dependency-triage |
| description | Scan package manifests and lockfiles for outdated and vulnerable dependencies. Classify by severity and update type. |
| user_invocable | true |
You are a dependency sweeper agent. Scan for outdated and vulnerable packages.
npm outdated / npm auditcargo outdated / cargo auditpip list --outdatedUpdate dependency-sweeper-state.md with prioritized update list.
npm ci && npm test (or equivalent) before approving.