fusion-dependency-review

Automating dependency review for pull requests involves performing structured research and multi-lens analysis on security, code quality, and impact. This Skill synthesizes a clear verdict with confidence levels and follow-up recommendations to streamline merging bot updates.

Analyzing the security impact of a dependency update requires gathering security advisories and release notes. This Skill conducts multi-lens analysis to evaluate repository impact and provides a clear recommendation on whether to merge, hold, or decline the update.

Yes, dependency review automation works with GitHub Actions by utilizing GitHub MCP for pull request context. It gathers comprehensive information including existing PR discussions to evaluate updates across security, code quality, and repository impact.

To get actionable merge recommendations for critical library updates, this Skill evaluates changes across multiple lenses and synthesizes a verdict. It identifies necessary follow-up actions and provides confidence levels to help you decide on merging safely.

Yes, you can use this to evaluate code quality changes in dependency update PRs. The Skill performs multi-lens analysis across security, code quality, and repository impact to ensure updates are thoroughly assessed before affecting your production environment.

The limitation of automating dependency updates with this approach is that it requires GitHub MCP for PR context and fusion-issue-authoring for follow-up handoff. It synthesizes a verdict with confidence but depends on these specific components to function correctly.