Skip to main content

dependency-change-review

Validate dependency additions/upgrades for risk and security.

来源信息

仓库
sunpar/agentic_development
最近来源活动
2026年5月22日 15:56
检测到的 SKILL.md 语言
英语
星标
0
Forks
0

安装方式

默认使用会先检查来源的 Prompt;你也可以切换为直接命令,或下载本地副本。

检查来源文件

决定是否安装前,请先阅读 SKILL.md,以及 SkillsMP 当前展示的配套文件。

正在显示 SKILL.md

SKILL.md
来源说明 · 只读预览
name
dependency-change-review
description
Validate dependency additions/upgrades for risk and security.
# Dependency Change Review ## Trigger Use before dependency changes merge. ## Inputs - Dependency diff and package metadata. ## Outputs - Risk assessment and recommendation. ## Procedure 1. Check licenses and maintenance. 2. Evaluate supply-chain risk and transitive blowup. 3. Estimate native-build risk and bundle impact. 4. Decide if existing dependencies can satisfy requirement. ## Guardrails - Do not approve unknown/new risky native dependencies without explicit justification. ## Success criteria - Approved dependency changes include rationale and fallback plan.
在 GitHub 查看