repository-dependency-reviewer

To automate repository dependency risk review, use this Skill to inspect local manifests and resolve package coordinates against Endor MCP tools. It automatically reports risky dependencies, unresolved versions, and data gaps to ensure your software is secure.

Yes, you need Endor MCP access to perform vulnerability checks. The Skill relies on Endor MCP tools to check resolved package coordinates against known risks and provide accurate dependency risk assessments for your repository.

Yes, you can use Gemini CLI along with endorctl to check repository dependencies for security vulnerabilities. The Skill leverages these dependencies to automate the review process and generate reports on potential risks and unresolved versions.

Dependency review is the process of inspecting dependency files and resolving package coordinates to check against Endor MCP tools. It identifies risky dependencies by reporting unresolved versions, recommended next checks, and data gaps in your software development workflow.

The best way to review repository dependencies for risk management is to automate the process using Endor MCP tools. This Skill inspects local manifests, resolves package coordinates, and reports risky dependencies, saving time and ensuring project security.

Dependency review reports unresolved versions and data gaps to highlight incomplete or missing package information during the risk assessment. This alerts you to dependencies that cannot be fully verified against Endor MCP tools, indicating potential security blind spots.