skills.rest
guicaulada
guicauladaCOMMUNITY
Explore all skills by this author →
𝕏@guicauladaGitHub

review-deps

Review dependency bump pull requests for CVEs, breaking changes, and CI failures.

1|Updated Feb 24, 2026
Search Tags:#automation#security#github#compatibility#cli#dependabot#dependency-review
One-click install
npx skills add https://github.com/guicaulada/dotfiles --skill review-deps
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-deps
Source: https://github.com/guicaulada/dotfiles/tree/main/home/dot_claude/exact_skills/review-deps
Command: npx skills add https://github.com/guicaulada/dotfiles --skill review-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviews automated dependency bump pull requests to identify compatibility risks, security vulnerabilities, and migration needs so maintainers can triage and act quickly without manual, repetitive checks.

Core Features & Use Cases

  • Security and Compatibility Analysis: Detects CVEs, security advisories, and breaking changes by researching changelogs and advisories.
  • Single and Batch Reviews: Handles a single PR or spawns parallel reviewer agents to process many bot-authored dependency PRs (Dependabot, Renovate, etc.).
  • GitHub Integration and Safe Impact Checks: Uses the gh CLI, inspects diffs and CI status, clones repositories to isolated temp directories for usage analysis, and aggregates structured reports for decisions.
  • Use Case: Triage all open Dependabot and Renovate PRs across your repositories, approving low-risk updates and surfacing PRs that require manual migration work.

Quick Start

Run the skill with a PR number or URL (for example, /review-deps owner/repo#123) or run /review-deps with no arguments to batch-review dependency PRs from your GitHub notifications.

Frequently Asked Questions about review-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review dependency bump pull requests for security vulnerabilities and breaking changes?▼

Batch-review dependency PRs by spawning parallel reviewer agents that process multiple bot-authored PRs across GitHub repositories. Running with no arguments automatically scans dependency PRs from your GitHub notifications to aggregate structured reports.

Do I need gh CLI authentication to review Dependabot and Renovate pull requests?▼

Batch-review dependency PRs by spawning parallel reviewer agents that process multiple bot-authored PRs across GitHub repositories. Running with no arguments automatically scans dependency PRs from your GitHub notifications to aggregate structured reports.

Can I triage all open dependency PRs across my GitHub repositories at once?▼

Yes, batch mode spawns parallel reviewer agents to triage all open Dependabot and Renovate PRs across repositories, approving low-risk updates and surfacing PRs that require manual migration work in aggregated structured reports.

What's the best way to automate dependency PR triage for CVEs and migration needs?▼

Batch-review dependency PRs by spawning parallel reviewer agents that process multiple bot-authored PRs across GitHub repositories. Running with no arguments automatically scans dependency PRs from your GitHub notifications to aggregate structured reports.

Does reviewing dependency pull requests require cloning the repository?▼

Batch-review dependency PRs by spawning parallel reviewer agents that process multiple bot-authored PRs across GitHub repositories. Running with no arguments automatically scans dependency PRs from your GitHub notifications to aggregate structured reports.

Related Skills

Explore More Software Engineering Skills→
Team-CommonlyTeam-Commonly
1.3k

github

Automate GitHub issue, PR, and repository operations via the gh CLI.

Official
Intermediate
JacobPEvansJacobPEvans
3

finalize-prs

Finalize pull requests across repositories by fixing CI failures and resolving review threads.

Community
Advanced
paultyngpaultyng
9

review-ci

Audit CI/CD pipeline configurations for security and supply chain risks.

Community
Advanced
hoanghn61hoanghn61

source-code-scanning

Scan source code and dependencies for vulnerabilities, secrets, and malicious code.

Community
Advanced