mondoohq/check-querypack-deprecations
.claude/skills/check-querypack-deprecations/SKILL.md
Check content/ mql.yaml query packs for usage of deprecated resources or fields from .lr definitions
$ install --global
skillsauthnpx skillsauth add mondoohq/cnquery check-querypack-deprecationsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 12:35 PM21.7s1 file scanned
SKILL.md
- name:
- check-querypack-deprecations
- description:
- Check content/ mql.yaml query packs for usage of deprecated resources or fields from .lr definitions
- disable-model-invocation:
- true
- argument-hint:
- [path-to-mql-yaml (optional, defaults to all)]
Check Query Packs for Deprecated Resource Usage
Audit MQL query pack files (*.mql.yaml in content/) against the provider .lr resource definitions to find queries that reference deprecated resources or fields.
Steps
1. Collect all deprecated items from .lr files
Search all providers/*/resources/*.lr files for comments containing "Deprecated" (case-insensitive). For each match, extract:
- The resource name (e.g.,
microsoft.organizations) - The field name if it's a field deprecation (e.g.,
createdTime) - What replaces it (from the deprecation comment)
Use Grep to find lines with // Deprecated or / Deprecated in .lr files, then read surrounding context to get the resource/field names.
2. Determine which mql.yaml files to check
- If
$ARGUMENTSis provided, check only that file - Otherwise, find all
*.mql.yamlfiles undercontent/
3. Cross-reference queries against deprecated items
Read each mql.yaml file and examine every mql: block. Check if any deprecated resource name or field appears in the query string. Be thorough:
- Check for resource names like
microsoft.organizations - Check for field access like
.createdTime,.vpcId,.staticWebsiteHosting - A field like
createdTimeonaws.s3.bucketwould appear as something accessing.createdTimein a query that operates on s3 buckets
4. Report findings
For each deprecated usage found, report in a markdown table:
- File path
- Query UID
- Deprecated usage (the exact text in the query)
- Replacement (what it should be changed to)
If no deprecated usage is found, say so.
Do NOT make any changes to files. This skill is read-only — it only reports findings.
Related Skills
steipete/skill-creator
testing
VerifiedTrustedCommunity
Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".
356,423SKILL.mdUpdated Apr 13, 2026
steipete/healthcheck
testing
VerifiedTrustedCommunity
Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).
356,423SKILL.mdUpdated Apr 13, 2026
openclaw/skill-creator
testing
VerifiedTrustedCommunity
Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".
353,662SKILL.mdUpdated Apr 10, 2026
openclaw/healthcheck
testing
VerifiedTrustedCommunity
Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).
353,662SKILL.mdUpdated Apr 10, 2026