skills.rest
bordenet
bordenetCOMMUNITY
Explore all skills by this author →
GitHub

security-upgrade

Scan project dependencies for known vulnerabilities and upgrade affected packages.

8|1|Updated Jan 24, 2026
Search Tags:#security#npm#go#upgrade#ci#cve#dependency scanning
One-click install
npx skills add https://github.com/bordenet/superpowers-plus --skill security-upgrade
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-upgrade
Source: https://github.com/bordenet/superpowers-plus/tree/main/skills/security/security-upgrade
Command: npx skills add https://github.com/bordenet/superpowers-plus --skill security-upgrade

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Outdated or vulnerable dependencies leave projects exposed to security risks, and manually identifying, upgrading, and validating them is time‑consuming and error‑prone.

Core Features & Use Cases

  • Multi‑manager CVE scanning for npm, Go modules, pip, Cargo, and Flutter/Dart projects.
  • Automated safe upgrades that respect version constraints and avoid forced major changes.
  • Full validation pipeline that builds, runs tests, and re‑scans to ensure no regressions before committing.
  • Typical scenarios include monthly security audits, CI/CD security gates, and pre‑release dependency hardening.

Quick Start

Ask the assistant to run the security‑upgrade skill on your repository to scan and fix vulnerable dependencies.

Frequently Asked Questions about security-upgrade

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan and upgrade vulnerable dependencies in my npm and Go projects?▼

To scan and upgrade vulnerable dependencies, this Skill performs multi-manager CVE scanning for npm, Go, pip, Cargo, and Flutter projects, applies safe upgrades respecting version constraints, and validates builds before committing.

Can I automate dependency scanning for vulnerable packages in my CI pipeline?▼

Yes, you can automate dependency scanning in CI pipelines. The Skill executes multi-manager CVE scans, applies safe package upgrades, runs tests, and commits fixes directly during CI/CD security gates or pre-release hardening.

What is the safest way to fix CVEs in Python and Cargo projects without breaking builds?▼

The safest way to fix CVEs is through automated safe upgrades that respect version constraints and avoid forced major changes. The Skill then executes a full validation pipeline to build, run tests, and re-scan before committing fixes.

Does dependency scanning support Flutter and Dart projects for security upgrades?▼

Yes, dependency scanning supports Flutter and Dart projects. The Skill performs multi-manager CVE scans and executes package-manager upgrade commands for Flutter/Dart alongside npm, Go, pip, and Cargo environments.

What are the limitations of automated safe upgrades for vulnerable packages?▼

A limitation of automated safe upgrades is that they respect version constraints and avoid forced major changes. This prevents build breaks but may not resolve vulnerabilities requiring major version bumps.

Related Skills

Explore More Software Engineering Skills→
kirvinkirvin

deps

Audits project dependencies for vulnerabilities and outdated packages across multiple package managers.

Community
Intermediate
HomericIntelligenceHomericIntelligence
18

scan-vulnerabilities

Scan code and dependencies for security vulnerabilities using Bandit, Safety, and Semgrep.

Official
Intermediate
nickromneynickromney

Setup Security Scanning

Configure security scanning for codebases and CI/CD pipelines.

Community
Advanced
micaelmaltamicaelmalta
1

dependencies

Automate dependency upgrades and lockfile synchronization across Node, Python, Go, Rust, and Ruby projects.

Community
Intermediate