skills.rest
SavigeSystemZ
SavigeSystemZOFFICIAL
Explore all skills by this author →
GitHub

dependency-review

Identify and analyze dependency changes across manifests and lockfiles.

Updated Aug 23, 2026
Search Tags:#security#compliance#license#review#manifests#lockfiles#dependency
One-click install
npx skills add https://github.com/SavigeSystemZ/LuxeLogic --skill dependency-review-savigesystemz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-review
Source: https://github.com/SavigeSystemZ/LuxeLogic/tree/main/database/.cursor/skills/dependency-review
Command: npx skills add https://github.com/SavigeSystemZ/LuxeLogic --skill dependency-review-savigesystemz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dependency reviews help teams quickly assess changes to dependencies for security, licensing, size impact, and necessity, reducing risk in software supply chains.

Core Features & Use Cases

  • Identify changes in manifests and lockfiles
  • Evaluate new dependencies for necessity, maintenance health, security, licensing, and bundle size
  • Review updated dependencies for breaking changes and report findings via the playbook
  • Record unresolved items in FIXME.md

Quick Start

Analyze the latest manifests and lockfiles to surface new or updated dependencies and generate a risk report.

Frequently Asked Questions about dependency-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review dependency changes in manifests and lockfiles for security risks?▼

Dependency review analyzes changes in manifests and lockfiles to assess risk by evaluating new, updated, or removed dependencies across languages, producing a governance-compliant report classifying findings into must-fix, should-fix, or informational.

What does a dependency review report include for new and updated packages?▼

A dependency review report evaluates new dependencies for necessity, maintenance health, security, licensing, and bundle size, while checking updated dependencies for breaking changes, classifying all findings by severity.

How do I track unresolved dependency security issues after a review?▼

Unresolved items identified during the dependency review are recorded in a FIXME.md file, ensuring that outstanding security, licensing, or maintenance concerns are documented for future resolution.

Can I use dependency review for codebases with multiple programming languages?▼

Yes, dependency review handles new, updated, or removed dependencies across multiple languages by analyzing package manifests and lockfiles, assessing security and licensing risks regardless of the specific language ecosystem.

What is the best way to classify dependency risk findings for compliance?▼

Dependency review classifies risk findings into must-fix, should-fix, or informational categories, generating a governance-compliant report that helps teams prioritize security and licensing issues in their software supply chain.

Why do I need to review dependencies before updating lockfiles?▼

Reviewing dependencies before updates helps teams quickly assess changes for security vulnerabilities, licensing issues, size impact, and necessity, reducing risk in software supply chains and preventing breaking changes.

Related Skills

Explore More Legal & Compliance Skills→
KamiJeongKamiJeong

speckit-version-guard-check

Verifies locked dependency versions and writes compatibility rules for downstream planning and implementation.

Community
Advanced
nksethnkseth

security-reviewer

Identify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.

Community
Advanced
Buntyarora97Buntyarora97

security_scan

Execute dependency audit, SAST scan, and privacy dataflow analysis to output a prioritized security report.

Community
Intermediate
arbazkhan971arbazkhan971
26

changelog

Generate structured changelogs and release notes from git commit and PR history.

Community
Advanced