security-upgrade

Scan project dependencies for known vulnerabilities and upgrade affected packages.

8|1|Updated Jan 24, 2026

Search Tags:#security #npm #go #upgrade #ci #cve #dependency scanning

Ready to run

npx skills add https://github.com/bordenet/superpowers-plus --skill security-upgrade

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-upgrade
Source: https://github.com/bordenet/superpowers-plus/tree/main/skills/security/security-upgrade
Command: npx skills add https://github.com/bordenet/superpowers-plus --skill security-upgrade

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Outdated or vulnerable dependencies leave projects exposed to security risks, and manually identifying, upgrading, and validating them is time‑consuming and error‑prone.

Core Features & Use Cases

Multi‑manager CVE scanning for npm, Go modules, pip, Cargo, and Flutter/Dart projects.
Automated safe upgrades that respect version constraints and avoid forced major changes.
Full validation pipeline that builds, runs tests, and re‑scans to ensure no regressions before committing.
Typical scenarios include monthly security audits, CI/CD security gates, and pre‑release dependency hardening.

Quick Start

Ask the assistant to run the security‑upgrade skill on your repository to scan and fix vulnerable dependencies.

Frequently Asked Questions about security-upgrade

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan and upgrade vulnerable dependencies in my npm and Go projects?▼

To scan and upgrade vulnerable dependencies, this Skill performs multi-manager CVE scanning for npm, Go, pip, Cargo, and Flutter projects, applies safe upgrades respecting version constraints, and validates builds before committing.

Can I automate dependency scanning for vulnerable packages in my CI pipeline?▼

Yes, you can automate dependency scanning in CI pipelines. The Skill executes multi-manager CVE scans, applies safe package upgrades, runs tests, and commits fixes directly during CI/CD security gates or pre-release hardening.

What is the safest way to fix CVEs in Python and Cargo projects without breaking builds?▼

The safest way to fix CVEs is through automated safe upgrades that respect version constraints and avoid forced major changes. The Skill then executes a full validation pipeline to build, run tests, and re-scan before committing fixes.

Does dependency scanning support Flutter and Dart projects for security upgrades?▼

Yes, dependency scanning supports Flutter and Dart projects. The Skill performs multi-manager CVE scans and executes package-manager upgrade commands for Flutter/Dart alongside npm, Go, pip, and Cargo environments.

What are the limitations of automated safe upgrades for vulnerable packages?▼

A limitation of automated safe upgrades is that they respect version constraints and avoid forced major changes. This prevents build breaks but may not resolve vulnerabilities requiring major version bumps.