envy-7z/mobile-update-advisor
skills/mobile-update-advisor/SKILL.md
Mobile dependency and platform update advisor for Android and Flutter projects. Use when mapping project structure, evaluating SDK/dependency updates, prioritizing technical debt, identifying architecture hotspots, or creating a safe improvement roadmap.
development
Updated Apr 5, 2026
$ install --global
skillsauthnpx skillsauth add envy-7z/mobile-agent-skillpack mobile-update-advisorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 2:01 AM4.7s4 files scanned
SKILL.md
- name:
- mobile-update-advisor
- description:
- Mobile dependency and platform update advisor for Android and Flutter projects. Use when mapping project structure, evaluating SDK/dependency updates, prioritizing technical debt, identifying architecture hotspots, or creating a safe improvement roadmap.
Mobile Update Advisor
Overview
Map the current mobile project, identify high-impact updates, and produce a prioritized improvement roadmap with risk-aware decisions.
Workflow
- Map project structure
- Run
scripts/mobile_project_snapshot.sh <repo_root>first. - Identify Android modules, Flutter packages/apps, CI files, and release/config files.
- Build dependency and platform snapshot
- Capture Android build stack indicators (
gradle-wrapper, AGP/Kotlin markers, SDK levels). - Capture Flutter/Dart indicators (
environment, package dependencies, major plugins). - Keep findings evidence-based; quote exact file paths and lines when possible.
- Evaluate updates and improvements
- Use
references/update-decision-rubric.mdto classify each candidate asupdate-now,schedule, ordefer. - Prioritize security fixes, build-break risks, and deprecations first.
- Balance impact, migration effort, and regression risk.
- Propose architecture/code quality improvements
- Highlight duplication, oversized files, unstable boundaries, and weak test coverage.
- Prefer incremental refactors with measurable outcomes.
- Suggest compact code changes only when they reduce complexity or defect risk.
- Publish decision report
- Return a ranked backlog with rationale, effort estimate, and risk score.
- Separate mandatory updates from optional optimizations.
Output Format
Use this exact section structure in the final response:
# Mobile Update + Improvement Report
## Project Map
- Android modules:
- Flutter modules:
- CI/release files:
## Must-Do Updates
1. [item] - reason - risk if delayed
## Scheduled Updates
1. [item] - target window - migration notes
## Architecture/Code Improvements
1. [improvement] - expected gain - implementation scope
## Ranked Next Actions
1. ...
2. ...
3. ...
Guardrails
- Preserve existing architecture unless the user asks for larger redesign.
- Avoid speculative upgrades without explicit compatibility evidence.
- Keep recommendations actionable and repository-specific.
References
- Use
references/update-decision-rubric.mdto score update urgency and risk.
Related Skills
envy-7z/writing-plans
development
VerifiedTrustedCommunity
Use when you have a spec or requirements for a multi-step task, before touching code
SKILL.mdUpdated Apr 5, 2026
envy-7z/verification-before-completion
data-ai
VerifiedTrustedCommunity
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always
SKILL.mdUpdated Apr 5, 2026
envy-7z/using-git-worktrees
tools
VerifiedTrustedCommunity
Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification
SKILL.mdUpdated Apr 5, 2026
envy-7z/thinkies
testing
VerifiedTrustedCommunity
Applies Kent Beck's Thinkies—pattern-based thinking habits that generate ideas. Use when stuck, exploring alternatives, or reframing decisions.
SKILL.mdUpdated Apr 5, 2026