triage-dependabot-prs

Scan repository fleets for open Dependabot pull requests and stage triage recommendations.

9|2|Updated Jun 6, 2026
One-click install
npx skills add https://github.com/app-vitals/shipwright --skill triage-dependabot-prs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: triage-dependabot-prs
Source: https://github.com/app-vitals/shipwright/tree/main/plugins/shipwright/skills/triage-dependabot-prs
Command: npx skills add https://github.com/app-vitals/shipwright --skill triage-dependabot-prs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you manage Dependabot pull requests across many repositories without manually checking each repo or posting premature review comments.

Core Features & Use Cases

  • Scans every repository under repos/ for open Dependabot pull requests.
  • Tracks triage state in state/dependabot-reviews.json, including pending, staged, posted, merged, and closed entries.
  • Syncs existing reviews against GitHub, triages new updates serially, and prepares patrol-style comments for conversational review before anything is posted.
  • Use it when you need a consistent review pass across multiple codebases, especially when dependency updates may affect one another.

Quick Start

Use this Skill to scan repos for open Dependabot pull requests and stage review comments for conversational approval before posting.

Frequently Asked Questions about triage-dependabot-prs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage Dependabot pull requests across multiple GitHub repositories?

To triage Dependabot pull requests across multiple GitHub repositories, this Skill scans your repository fleet for open dependency updates and stages review recommendations in a JSON state file for approval. It processes PRs serially without posting comments automatically.

Do I need the gh CLI to manage dependency update queues?

Yes, you need the gh CLI to manage dependency update queues with this Skill. It requires the GitHub CLI to sync existing review states against GitHub and retrieve open Dependabot PRs from repositories organized under a repos directory.

What's the best way to review Dependabot updates before posting comments?

The best way to review Dependabot updates before posting comments is to stage patrol-style comments for conversational approval. This Skill tracks triage states like pending, staged, posted, merged, and closed in a local JSON file to keep decisions synchronized safely.

How does Dependabot PR tracking keep review decisions synchronized with merged or closed PRs?

Dependabot PR tracking keeps review decisions synchronized by syncing existing reviews against GitHub. It updates the JSON state file with merged or closed entries, ensuring your review queue stays current without retaining stale or resolved pull requests.

Why are Dependabot PRs processed serially instead of in parallel?

Dependabot PRs are processed serially to account for dependency updates that may affect one another across your codebases. This sequential per-PR processing invokes the paired triage skill to maintain consistency during your review pass.