bjornmelin/repo-modernizer
skills/repo-modernizer/SKILL.md
Repo/monorepo modernization: dependency upgrades, security fixes, deprecation cleanup, framework migrations, dependency-native refactors, and verified hard-cut simplification.
$ install --global
skillsauthnpx skillsauth add bjornmelin/dev-skills repo-modernizerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 11, 2026, 3:46 AM105.4s7 files scanned
SKILL.md
- name:
- repo-modernizer
- description:
- Repo/monorepo modernization: dependency upgrades, security fixes, deprecation cleanup, framework migrations, dependency-native refactors, and verified hard-cut simplification.
Repo Modernizer
Use this skill when you need to audit, upgrade, refactor, and simplify a repo or monorepo end-to-end around dependencies, security findings, deprecations, and framework migrations.
Variant References
Use the base prompt below by default. If the repo shape or workflow calls for a specialized operating mode, load the matching reference first:
references/00-variant-index.mdreferences/framework-lane-selection.mdreferences/dependency-decision-matrix.mdreferences/verification-matrix.mdreferences/report-template.mdreferences/bun-first.mdreferences/pnpm-turbo-monorepo.mdreferences/plan-first.mdreferences/gh-deps-workflow.mdreferences/gh-deps-report-spec.md
Selection guidance:
- Bun-managed repos: start with
references/bun-first.md - pnpm + Turbo monorepos: start with
references/pnpm-turbo-monorepo.md - review-heavy or approval-gated work: start with
references/plan-first.md - GitHub release/changelog dependency intel: use the scripts in
scripts/and loadreferences/gh-deps-workflow.md - framework-heavy repos: also read
references/framework-lane-selection.md - during package triage: read
references/dependency-decision-matrix.md - before execution wrap-up: read
references/verification-matrix.md - for final delivery: read
references/report-template.md - if unclear: read
references/00-variant-index.mdfirst
Intent
- Find every vulnerable dependency, outdated dependency, deprecated API, obsolete custom abstraction, and dependency-driven cleanup opportunity.
- Deeply research the latest official docs, changelogs, migration guides, release notes, GitHub releases, advisories, and upstream issues.
- Upgrade dependencies to the latest safe and supportable versions.
- Refactor the codebase to adopt modern dependency-native APIs and delete obsolete wrappers, shims, fallbacks, and duplicate implementations.
- Leave the repo in a verified, production-ready, simplified state.
Required Skills and Tools
Use these throughout the task:
$bun-dev$hard-cut$clean-code$reducing-entropy$githubcontext7web.run
Use $opensrc conditionally as an escalation path for package upgrades
that need source-level proof.
Framework-specific routing is defined in the execution prompt below and refined
further in references/framework-lane-selection.md.
GitHub Dependency Intel Lane
Resolve skill_dir as the directory containing this skill before running the
bundled dependency-intel scripts.
- Full dependency report:
python3 "$skill_dir/scripts/gh_deps_intel.py" full --repo . --out reports --mode safe
- Single dependency migration plan:
python3 "$skill_dir/scripts/gh_deps_intel.py" package --repo . --out reports --mode safe --dependency <name>
- Stage-level debugging:
python3 "$skill_dir/scripts/gh_deps_intel.py" scan --repo . --out reportspython3 "$skill_dir/scripts/gh_deps_intel.py" enrich --repo . --out reports --mode safepython3 "$skill_dir/scripts/gh_deps_intel.py" analyze --repo . --out reports --mode safe
- Direct GitHub helpers:
python3 "$skill_dir/scripts/gh_release_diff.py" owner/repo --current <version> --target <version>python3 "$skill_dir/scripts/gh_compare_notes.py" owner/repo <old-ref> <new-ref>python3 "$skill_dir/scripts/gh_rate_limit_diag.py"
Default to --mode safe. Use --mode fast only when the user accepts bounded
parallel API calls. Produce both Markdown and JSON reports.
Load these references when using this lane:
references/gh-deps-workflow.mdreferences/gh-deps-command-mapping.mdreferences/gh-deps-github-api-endpoints.mdreferences/gh-deps-compatibility-policy.mdreferences/gh-deps-report-spec.mdreferences/gh-deps-troubleshooting.md
Execution Prompt
For full execution mode, load references/execution-prompt.md. It contains the complete modernization prompt, research requirements, dependency audit workflow, framework lanes, upgrade strategy, verification expectations, and final report contract.
Keep this entrypoint focused on routing and reference selection. Do not duplicate framework-specific playbooks here; use the variant references above.
Related Skills
bjornmelin/web-waapi
development
VerifiedTrustedCommunity
Use this skill for Browser Web Animations API: Element.animate(), Animation, KeyframeEffect, playback control, generated keyframes, cancel/finish, commitStyles, and cleanup. Trigger on Element.animate, WAAPI, Web Animations API, KeyframeEffect, Animation object, commitStyles. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
2SKILL.mdUpdated Jun 11, 2026
bjornmelin/web-three-r3f
tools
VerifiedTrustedCommunity
Use this skill for Three.js, React Three Fiber, Drei, Canvas/createRoot lifecycle, loaders, GLTF, useFrame, disposal, SSR/client boundaries, DPR, and browser proof. Trigger on Three.js, THREE, @react-three/fiber, @react-three/drei, R3F Canvas, useFrame, GLTF, WebGLRenderer. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
2SKILL.mdUpdated Jun 11, 2026
bjornmelin/web-tailwind-motion
development
VerifiedTrustedCommunity
Use this skill for Tailwind CSS v4 transition, animation, duration, easing, motion-safe/motion-reduce, @theme motion tokens, and static class safety. Trigger on Tailwind animation, transition-all, motion-safe, motion-reduce, @theme, animate-, duration-. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
2SKILL.mdUpdated Jun 11, 2026
bjornmelin/web-rive
development
VerifiedTrustedCommunity
Use this skill for Rive web and React runtime integration, .riv assets, state machines, inputs, lifecycle cleanup, accessibility, remote asset security, and fallback behavior. Trigger on Rive, .riv, state machine input, @rive-app/react-webgl2, @rive-app/webgl2, @rive-app/react-canvas, @rive-app/canvas, Rive web. Do not use for near-miss tasks outside these boundaries; route to adjacent motion or platform skills when they own the implementation.
2SKILL.mdUpdated Jun 11, 2026