What problem does it solve? Repos in a portfolio silently drift apart on shared versions — one repo sits three majors behind on actions/checkout while its siblings moved on, and nothing fails loudly to reveal it. This skill runs a read-only, peer-relative currency audit across every repo and, crucially, reports why each laggard is behind (usually a missing Dependabot config) rather than just listing stale pins. ## Core Features & Use Cases - Cross-repo drift scan: A Bash script walks local checkouts and emits JSON covering pinned GitHub Actions versions, toolchain pins, hosted vs self-hosted runner counts, and Dependabot coverage per repo. - Peer-relative ranking: Compares each repo against the portfolio mode (not upstream registries), tiering findings as internally inconsistent, major-gap, or minor-gap laggards. - Cause classification: Cross-references every laggard against Dependabot config to distinguish unmanaged repos (prescribe rendering config) from managed-but-stalled ones. - Use Case: Ask "which of our products are falling behind on dependency versions?" and get a markdown report ranking laggards, flagging repos with no automation watching them, and recommending fixes in priority order. ## Quick Start Ask the agent to run a what's-behind audit across the portfolio to find which repos are lagging their peers on GitHub Actions and toolchain versions.
