Screened · automated checks passed
dependency-update-bot
What the author says it does
Scans your project for outdated npm, pip, Cargo, Go, or Ruby packages. Runs a CVE security audit. Fetches changelogs, summarizes breaking changes with Gemini, and opens one PR per risk group (patch, minor, major). Includes Diagnosis Mode for install conflicts. Use when asked to update dependencies, check for outdated packages, open dependency PRs, scan for package updates, audit for CVEs, or flag breaking changes in upgrades. Trigger when a user says "check for outdated packages", "update my dependencies", "open PRs for dependency updates", "scan for CVEs", or "which packages need upgrading".
Quoted from the skill's own SKILL.md trigger description — this is what tells
Claude when to activate it. Not yet verified by us.
Automated screening
100/100 validator score
Scored by the same rules as our free SKILL.md validator: trigger description quality, body substance, structure. Automated — a human bench test is the next step in the pipeline.
Install (unverified — review first)
git clone https://github.com/Varnan-Tech/opendirectory # skill lives at: skills/dependency-update-bot/SKILL.md
SkillProof status
This skill is in our test queue. We install every skill in a clean environment, run a trigger battery and score output against a baseline before it earns a catalog page — the full protocol is public. Until then, treat it like any unreviewed dependency: read the SKILL.md and any scripts before installing.
Already tested in Productivity & Workflow
- Fetch URL As Markdown Local trafilatura-first URL-to-Markdown fetcher with a clean exit-code contract for when to fall back to Exa.
- Refresh Context Map Rebuilds the AIDEV-anchor/AGENTS.md/ADR manifest that powers claude-leverage's PreToolUse context hook.
- Video Vision Local ffmpeg+Whisper pipeline that lets Claude actually watch and transcribe video files
- YT Digest Turns a YouTube URL into a timestamped, screenshotted markdown research note via real yt-dlp + ffmpeg.