speedwave-review-deps
OfficialCritical security review for Dependabot PRs.
Software Engineering#dependencies#supply-chain#security-review#dependabot#vulnerability-analysis#pr-diffs#registry-checks
Authorspeednet-software
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This skill automates a rigorous security review of Dependabot PRs to protect Speedwave ecosystems from supply‑chain risks and unintended changes introduced by dependency updates.
Core Features & Use Cases
- PR data gathering: Extracts PR metadata, affected manifests, and changes across npm, Cargo, GitHub Actions, and Docker contexts.
- Ecosystem-sensitive risk analysis: Classifies each updated dependency by ecosystem, type, and version delta, and assesses risk factors such as breaking changes and CVEs.
- Parallel security research orchestration: Launches background checks per dependency and aggregates findings into a structured risk report.
Quick Start
Provide a GitHub PR URL to begin an automated dependency update security review.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: speedwave-review-deps Download link: https://github.com/speednet-software/speedwave/archive/main.zip#speedwave-review-deps Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.