skills.rest
WhatIfWeDigDeeper
WhatIfWeDigDeeperCOMMUNITY
Explore all skills by this author →
GitHub

uv-deps

Audit Python package vulnerabilities and update dependencies via uv in a Git worktree.

1|Updated Jan 16, 2026
Search Tags:#security#package management#python#uv#dependencies#audit#update
One-click install
npx skills add https://github.com/WhatIfWeDigDeeper/application-tracker --skill uv-deps
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: uv-deps
Source: https://github.com/WhatIfWeDigDeeper/application-tracker/tree/main/.agents/skills/uv-deps
Command: npx skills add https://github.com/WhatIfWeDigDeeper/application-tracker --skill uv-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of auditing Python packages for security vulnerabilities (CVEs) and updating outdated dependencies using the uv package manager, ensuring your projects are secure and up-to-date.

Core Features & Use Cases

  • Security Audits: Scans your Python project for known security vulnerabilities (CVEs).
  • Dependency Updates: Upgrades your project's packages to the latest compatible versions.
  • Isolated Worktree: Performs all operations in a temporary Git worktree to prevent accidental modification of your main codebase.
  • Use Case: Run a security audit on your FastAPI project to identify and fix any high-severity vulnerabilities before deploying to production.

Quick Start

Use the uv-deps skill to update all Python packages in your project.

Frequently Asked Questions about uv-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Python dependencies for security vulnerabilities using uv?▼

To audit Python dependencies for security vulnerabilities, this Skill scans your project using pip-audit within an isolated Git worktree. It identifies known CVEs in your packages and helps upgrade them using the uv package manager.

Does uv-deps work with pyproject.toml-based projects?▼

Yes, uv-deps works specifically with pyproject.toml-based projects. It reads your dependency configurations from this file to perform targeted package updates and automated commit or PR generation after scanning for vulnerabilities.

What do I need to run a Python package security audit with uv?▼

To run a Python package security audit with uv, you need git, uv, and python3 installed in your environment. These dependencies are required to create the isolated Git worktree and execute the pip-audit vulnerability scans.

What is the best way to safely update Python packages without breaking my main codebase?▼

The best way to safely update Python packages without breaking your main codebase is using an isolated Git worktree. This Skill performs all dependency upgrades and vulnerability scans in a temporary worktree, preventing accidental modifications to your primary branch.

Can I target specific outdated Python packages for an update instead of all dependencies?▼

Yes, you can target specific outdated Python packages for an update. The Skill supports targeted package updates, allowing you to upgrade individual dependencies to their latest compatible versions rather than forcing a bulk update across your entire project.

Why does my Python dependency update happen inside a Git worktree instead of my main branch?▼

Your Python dependency update happens inside a Git worktree to ensure your main codebase remains untouched during vulnerability scanning and package upgrades. This isolation prevents accidental modifications and allows safe automated commit and PR generation.

Related Skills

Explore More Software Engineering Skills→
Mahaboob26Mahaboob26

setting-up-streamlit-environment

Automate Python environment setup for Streamlit projects with uv.

Community
Intermediate
lehalpaullehalpaul

prepare-pr

Rebase GitHub Pull Requests onto main and run automated gates.

Community
Advanced
cajiascajias

uv-worktree-venv-fallthrough

Diagnoses uv run PYTHONPATH fallthrough issues in fresh git worktrees with empty virtual environments.

Community
Intermediate
frankxaifrankxai

using-git-worktrees

Create isolated git worktrees with dependency setup and baseline tests.

Community
Intermediate