alirezarezvani/claude-md-dependency-rescan
skill/claude-md-dependency-rescan/SKILL.md
Re-detect this project's tech stack from package.json / requirements.txt / pyproject.toml / go.mod / Cargo.toml and diff it against the Tech Stack section of every CLAUDE.md. Read-only — returns added / removed / renamed dependencies, never edits.
$ install --global
skillsauthnpx skillsauth add alirezarezvani/claudeforge claude-md-dependency-rescanInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 19, 2026, 4:28 AM253.8s1 file scanned
SKILL.md
- name:
- claude-md-dependency-rescan
- description:
- Re-detect this project's tech stack from package.json / requirements.txt / pyproject.toml / go.mod / Cargo.toml and diff it against the Tech Stack section of every CLAUDE.md. Read-only — returns added / removed / renamed dependencies, never edits.
- when_to_use:
- |
- argument-hint:
- [manifest-path]
- context:
- fork
- agent:
- Explore
- - "Bash(find:
- *)
- - "Bash(cat:
- *)
- disable-model-invocation:
- false
CLAUDE.md Dependency Rescan (forked, read-only)
Optional explicit manifest: $ARGUMENTS (default: auto-detect all five manifest types).
Run these steps in order. Do not modify any file.
- Detect manifests. Look for
package.json,requirements.txt,pyproject.toml,go.mod,Cargo.tomlat the repo root and one level deep (workspaces/monorepos). - Extract declared dependencies from each:
package.json→ keys ofdependenciesanddevDependencies(skip versions).requirements.txt→ first token of each non-comment line.pyproject.toml→[project.dependencies]/[tool.poetry.dependencies]keys.go.mod→ module paths underrequire (...).Cargo.toml→ keys under[dependencies]/[dev-dependencies].
- Inventory documented deps in every
CLAUDE.md(and.claude/rules/*.md): grep for the Tech Stack / Dependencies sections and the lists under them. - Compute three sets per file:
added: in manifest but absent from this CLAUDE.md.removed: documented in this CLAUDE.md but absent from manifest.renamed: documented and present in manifest but spelled differently (react-routervsreact-router-dom,pgvspsycopg2).
- Return in this exact shape:
## Dependency Rescan
Manifests detected: <list>
Total declared deps: <count>
### Per file
#### <path-to-CLAUDE.md>
- Added (in manifest, not documented): <list or "none">
- Removed (documented, not in manifest): <list or "none">
- Renamed / aliased: <list or "none">
- If every documented set matches its manifest, return exactly
## Dependency Rescan\n\nAll documented deps match manifests. <M> files inspected.. Do not pad.
Hard rule: do not propose specific edits — just surface the diffs. /sync-claude-md decides whether to write them.
Related Skills
alirezarezvani/karpathy-guidelines
development
VerifiedTrustedCommunity
Behavioral guardrails for LLM-assisted coding. Use when writing, reviewing, or refactoring code in any project to avoid overcomplication, keep changes surgical, surface assumptions early, and execute against verifiable success criteria.
368SKILL.mdUpdated May 19, 2026
alirezarezvani/claude-md-link-check
testing
VerifiedTrustedCommunity
Verify every @path chain import and every markdown link inside every CLAUDE.md in this project resolves to an existing file. Read-only — returns broken links with file:line refs, never edits.
368SKILL.mdUpdated May 19, 2026
alirezarezvani/claude-md-drift-audit
testing
VerifiedTrustedCommunity
Audit every CLAUDE.md in this project for drift against the last week of git history. Flags sections that reference deleted files, renamed paths, or removed dependencies. Read-only — returns a punch list, never edits.
368SKILL.mdUpdated May 19, 2026
alirezarezvani/claude-md-enhancer
development
VerifiedTrustedCommunity
Analyzes, generates, and enhances CLAUDE.md files for any project type using best practices, modular architecture support, and tech stack customization. Use when setting up new projects, improving existing CLAUDE.md files, or establishing AI-assisted development standards.
368SKILL.mdUpdated Apr 3, 2026