a5c-ai/dependency-updater
library/specializations/code-migration-modernization/skills/dependency-updater/SKILL.md
Automated dependency update execution with breaking change detection and rollback capability
$ install --global
skillsauthnpx skillsauth add a5c-ai/babysitter dependency-updaterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 28, 2026, 4:31 PM261.2s2 files scanned
SKILL.md
- name:
- dependency-updater
- description:
- Automated dependency update execution with breaking change detection and rollback capability
- allowed-tools:
- ["Bash", "Read", "Write", "Grep", "Glob", "Edit"]
Dependency Updater Skill
Executes automated dependency updates safely with breaking change detection, rollback capability, and intelligent update batching.
Purpose
Enable safe, automated dependency updates for:
- Security patch application
- Version upgrades
- Breaking change management
- Update batching and sequencing
- Rollback coordination
Capabilities
1. Safe Update Execution
- Execute updates with validation
- Run tests after updates
- Verify build success
- Check runtime compatibility
2. Breaking Change Detection
- Analyze changelogs for breaking changes
- Detect API modifications
- Identify behavioral changes
- Flag deprecation impacts
3. Rollback Capability
- Create pre-update snapshots
- Enable quick rollback
- Preserve lockfile history
- Document rollback procedures
4. Update Batching
- Group compatible updates
- Prioritize security updates
- Sequence breaking changes
- Minimize update iterations
5. Lock File Management
- Update lockfiles consistently
- Handle peer dependencies
- Resolve version conflicts
- Maintain reproducibility
6. Changelog Parsing
- Extract version changes
- Identify migration guides
- Document upgrade steps
- Link to release notes
Tool Integrations
| Tool | Purpose | Integration Method | |------|---------|-------------------| | Dependabot | GitHub automation | API | | Renovate | Multi-platform updates | CLI / Config | | npm-check-updates | npm updates | CLI | | pyup | Python updates | CLI | | bundler-audit | Ruby updates | CLI | | go get -u | Go updates | CLI |
Output Schema
{
"updateId": "string",
"timestamp": "ISO8601",
"updates": [
{
"package": "string",
"from": "string",
"to": "string",
"type": "major|minor|patch|security",
"breakingChanges": "boolean",
"status": "applied|failed|skipped",
"rollbackAvailable": "boolean"
}
],
"validation": {
"testsPass": "boolean",
"buildSuccess": "boolean",
"runtimeChecks": "boolean"
},
"rollback": {
"snapshotId": "string",
"lockfileBackup": "string"
}
}
Integration with Migration Processes
- dependency-analysis-updates: Update execution
- framework-upgrade: Coordinated upgrades
Related Skills
dependency-scanner: Pre-update analysisvulnerability-scanner: Security prioritization
Related Agents
dependency-modernization-agent: Update orchestrationframework-upgrade-specialist: Framework updates
Related Skills
a5c-ai/model-card-generator
development
VerifiedTrustedCommunity
Model documentation skill for generating model cards following Google's model card framework.
680SKILL.mdUpdated Apr 28, 2026
a5c-ai/mlflow-experiment-tracker
development
VerifiedTrustedCommunity
MLflow integration skill for experiment tracking, model registry, and artifact management. Enables LLMs to log experiments, compare runs, manage model lifecycle, and retrieve artifacts through the MLflow API.
680SKILL.mdUpdated Apr 28, 2026
a5c-ai/lime-explainer
data-ai
VerifiedTrustedCommunity
LIME-based local explanation skill for individual predictions across tabular, text, and image data.
680SKILL.mdUpdated Apr 28, 2026
a5c-ai/kubeflow-pipeline-executor
devops
VerifiedTrustedCommunity
Kubeflow Pipelines skill for ML workflow orchestration, component management, and Kubernetes-native ML.
680SKILL.mdUpdated Apr 28, 2026