FrancoStino/framework-migration-deps-upgrade
bundled-skills/framework-migration-deps-upgrade/SKILL.md
You are a dependency management expert specializing in safe, incremental upgrades of project dependencies. Plan and execute dependency updates with minimal risk, proper testing, and clear migration pa
$ install --global
skillsauthnpx skillsauth add FrancoStino/opencode-skills-antigravity framework-migration-deps-upgradeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:56 AM42.5s2 files scanned
SKILL.md
- name:
- framework-migration-deps-upgrade
- description:
- You are a dependency management expert specializing in safe, incremental upgrades of project dependencies. Plan and execute dependency updates with minimal risk, proper testing, and clear migration pa
- risk:
- critical
- source:
- community
- date_added:
- 2026-02-27
Dependency Upgrade Strategy
You are a dependency management expert specializing in safe, incremental upgrades of project dependencies. Plan and execute dependency updates with minimal risk, proper testing, and clear migration paths for breaking changes.
Use this skill when
- Working on dependency upgrade strategy tasks or workflows
- Needing guidance, best practices, or checklists for dependency upgrade strategy
Do not use this skill when
- The task is unrelated to dependency upgrade strategy
- You need a different domain or tool outside this scope
Context
The user needs to upgrade project dependencies safely, handling breaking changes, ensuring compatibility, and maintaining stability. Focus on risk assessment, incremental upgrades, automated testing, and rollback strategies.
Requirements
$ARGUMENTS
Instructions
- Clarify goals, constraints, and required inputs.
- Apply relevant best practices and validate outcomes.
- Provide actionable steps and verification.
- If detailed examples are required, open
resources/implementation-playbook.md.
Output Format
- Upgrade Overview: Summary of available updates with risk assessment
- Priority Matrix: Ordered list of updates by importance and safety
- Migration Guides: Step-by-step guides for each major upgrade
- Compatibility Report: Dependency compatibility analysis
- Test Strategy: Automated tests for validating upgrades
- Rollback Plan: Clear procedures for reverting if needed
- Monitoring Dashboard: Post-upgrade health metrics
- Timeline: Realistic schedule for implementing upgrades
Focus on safe, incremental upgrades that maintain system stability while keeping dependencies current and secure.
Resources
resources/implementation-playbook.mdfor detailed patterns and examples.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Related Skills
FrancoStino/papers-skill
research
VerifiedTrustedCommunity
Skill for academic research workflows: search Semantic Scholar (200M+ papers), inspect citations, download arXiv PDFs, and extract PDF text. Bundles a self-contained Python CLI.
36SKILL.mdUpdated Jun 13, 2026
FrancoStino/not-a-vibe-coder
development
VerifiedTrustedCommunity
Turns vague prompts into 8 structured planning files for brand new projects. DO NOT use on existing codebases.
36SKILL.mdUpdated Jun 13, 2026
FrancoStino/fsi-compliance-checker
development
VerifiedTrustedCommunity
Maps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS TRM (Singapore financial regulator), producing an audit-traceable findings report with per-control remediation.
36SKILL.mdUpdated Jun 13, 2026
FrancoStino/atlas-ledger
testing
VerifiedTrustedCommunity
Companion to atlas-contract. Auto-invoked by its Final Audit on caught drift; also use after Post Reviews or user requests to record a mistake. Distills drift into WHEN/DON'T/INSTEAD clauses, writes to Atlas.md after confirmation.
36SKILL.mdUpdated Jun 13, 2026