skills.rest
Rune-kit
Rune-kitOFFICIAL
Explore all skills by this author →
GitHub

dependency-doctor

Detect package managers, audit outdated dependencies, and generate prioritized update plans.

82|23|Updated Feb 24, 2026
Search Tags:#security#npm#pip#dependencies#auditing#vulnerabilities#update plan
One-click install
npx skills add https://github.com/Rune-kit/rune --skill dependency-doctor-rune-kit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-doctor
Source: https://github.com/Rune-kit/rune/tree/main/skills/dependency-doctor
Command: npx skills add https://github.com/Rune-kit/rune --skill dependency-doctor-rune-kit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively manages your project's dependencies by identifying outdated packages, detecting security vulnerabilities, and providing a clear, prioritized plan for updates.

Core Features & Use Cases

  • Automated Detection: Automatically identifies the package manager (npm, yarn, pip, etc.) used in your project.
  • Vulnerability Scanning: Checks for known security vulnerabilities in your dependencies.
  • Update Planning: Generates a prioritized list of updates, distinguishing between critical security fixes, patch updates, and potentially breaking major version changes.
  • Use Case: Before deploying a new feature, run dependency-doctor to ensure all your project's dependencies are up-to-date and free from critical security flaws, preventing potential production issues.

Quick Start

Run dependency-doctor to check the health of my project's dependencies.

Frequently Asked Questions about dependency-doctor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit npm and pip dependencies for security vulnerabilities?▼

To audit dependencies for security vulnerabilities, the tool automatically detects your package manager, scans for known flaws, and generates a prioritized update plan to fix them.

What is the best way to plan major version dependency updates without breaking changes?▼

Planning major version dependency updates requires analyzing breaking changes for risk assessment, which this tool performs to provide a prioritized, safe update plan for your project.

Can I check both npm and pip packages for outdated dependencies in one step?▼

Yes, you can check for outdated packages across npm and pip in one step because the tool automatically detects the package manager used in your project environment and scans accordingly.

How do I prioritize critical security fixes over patch updates for my project dependencies?▼

Prioritizing critical security fixes over patch updates is handled by generating a prioritized list that distinguishes between urgent vulnerabilities and standard version bumps.

Does dependency auditing work with both yarn and pip package managers?▼

Yes, dependency auditing works with yarn, npm, and pip package managers through automated detection of your project environment before scanning for vulnerabilities and outdated packages.

Related Skills

Explore More Software Engineering Skills→
crgarcia12crgarcia12

dependency-inventory

Extract and catalog project dependencies from package manifests and lock files.

Community
Advanced
bethanychamberlainbethanychamberlain
2

upgrades

Plan and execute LibreChat upgrades across Docker and Kubernetes deployments.

Community
Advanced
harperaaharperaa
15

supply-chain-dependency-risks-ai-code

Analyze dependency manifests for CVEs, typosquatting, and dependency-confusion risks.

Community
Intermediate
RazisafirRazisafir
1

performing-sca-dependency-scanning-with-snyk

Automate SCA dependency scanning with Snyk CLI across CI/CD pipelines.

Community
Advanced