Dependency Management skills for Claude Code and Codex
Skills for dependencies and packages: resolving package conflicts, Dependabot setup, supply chain risk audits, framework upgrades for Java, .NET, Expo and Stripe SDKs, NuGet and vcpkg, and publishing packages to PyPI. They help an agent keep third-party code current and safe.
Highest-scoring dependency management skills in the October 22, 2026 snapshot: go-ci from eduardo-sl/go-agent-skills (95/100), skill-scanner from getsentry/skills (88/100) and version-check from ykdojo/claude-code-tips (80/100). Scores come from the Suede Skill Check.
- 23 listed skills
- 12 repositories
- 4 with full pages
19 from official publishers. 5 bundle scripts. 1 connect to an outside service. Listed in Developer Tools and Frameworks (12), DevOps and Cloud (5), Security (4), AI Agents and LLM Engineering (2).
All 23 dependency management skills
No matching skills. Try fewer words or clear your search.
| Skill | Repository | What it does |
|---|---|---|
| gha-security-review 86/100 · B | getsentry/skills | Reviews GitHub Actions workflows for exploitation vulnerabilities such as pwn requests, expression injection, credential theft, and supply chain attacks, with concrete proof-of-concept scenarios. |
| go-ci 95/100 · A | eduardo-sl/go-agent-skills | Sets up continuous integration for Go projects with GitHub Actions, caching, golangci-lint, test and coverage gates, vulnerability scanning, SAST, Dependabot, and build matrices. |
| skill-scanner 88/100 · B | getsentry/skills | Scans agent skills for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks before installation. |
| version-check 80/100 · B | ykdojo/claude-code-tips | Recommends which Claude Code version to run or whether to update, and what changed since the installed version. |
| agent-supply-chain 80/100 · B | github/awesome-copilot | Verify supply chain integrity for AI agent plugins, tools, and dependencies. Use this skill when: - Generating SHA-256 integrity manifests for agent… |
| dart-resolve-package-conflicts 75/100 · C | flutter/skills | Workflow for fixing package version conflicts. Use this when `pub get` fails due to incompatible package versions. |
| dependabot 78/100 · C | github/awesome-copilot | Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files… |
| dotnet-upgrade 65/100 · D | github/awesome-copilot | Ready-to-use prompts for comprehensive .NET framework upgrade analysis and execution |
| expo-upgrade 71/100 · C | expo/skills | Guidelines for upgrading Expo SDK versions and fixing dependency issues |
| github-actions-runtime-upgrade-conventions 64/100 · D | github/awesome-copilot | Upgrade GitHub Actions to supported runtimes by selecting safe action versions, preserving workflow behavior, and validating post-upgrade execution. |
| java-upgrade 80/100 · B | github/awesome-copilot | Upgrade a Java project to a newer JDK (11 to 17, 17 to 21, 21 to 25) and adopt the new language and library features. Detects the current Java… |
| langchain-dependencies 77/100 · C | langchain-ai/langchain-skills | INVOKE THIS SKILL when setting up a new project or when asked about package versions, installation, or dependency management for LangChain… |
| nuget-manager 74/100 · C | github/awesome-copilot | Manage NuGet packages in .NET projects/solutions. Use this skill when adding, removing, or updating NuGet package versions. It enforces using… |
| open-sourcing 92/100 · A | trailofbits/skills | This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public"… |
| python-pypi-package-builder 82/100 · B | github/awesome-copilot | End-to-end skill for building, testing, linting, versioning, and publishing a production-grade Python library to PyPI. Covers all four build… |
| react18-dep-compatibility 68/100 · D | github/awesome-copilot | React 18.3.1 and React 19 dependency compatibility matrix. |
| release-it 81/100 · B | wondelai/skills | Build production-ready systems with stability patterns: circuit breakers, bulkheads, timeouts, and retry logic. Use when the user mentions… |
| sandbox-npm-install 79/100 · C | github/awesome-copilot | Install npm packages in a Docker sandbox environment. Use this skill whenever you need to install, reinstall, or update node_modules inside a… |
| sanity-studio-upgrade 79/100 · C | sanity-io/agent-toolkit | Produces a tailored Sanity Studio upgrade plan by inspecting the repository's installed versions, config, and source, then reporting only the… |
| supply-chain-risk-auditor 88/100 · B | trailofbits/skills | Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or… |
| upgrade-stripe 68/100 · D | stripe/ai | Guide for upgrading Stripe API versions, webhook endpoints, server-side SDKs, Stripe.js, and mobile SDKs |
| utility-pm-release-conductor 83/100 · B | product-on-purpose/pm-skills | Walk the guided 6-gate release runbook (G0 readiness, G1 adversarial review, G2 version bump and CHANGELOG, G2.5 commit and re-verify, G3 tag and… |
| vcpkg 78/100 · C | github/awesome-copilot | Guide for setting up vcpkg in C++ projects, managing dependency versions, and cross-compiling. Covers manifest initialization, CMake and Visual… |
How to choose dependency management skills
Separate upgrade skills from audit skills. Upgrade skills move one framework or SDK to a new version with its migration steps; audit skills assess the risk of what you already depend on.
Upgrade skills change lockfiles and build config. Run them on a branch with CI, and upgrade one major version at a time.
Publishing skills (PyPI, release-it) need registry credentials and push public artifacts, so keep the final publish step under your control.
Ranked dependency management shortlists
Related topics
CI/CD and DevOps 39Security Auditing and Review 108Vulnerability Scanning 55.NET and C# 31Agent Safety and Guardrails 27Git and Version Control 39C, C++ and Embedded 8CMS, Sanity and WordPress 13
Find your next useful skill
Explore Rising Skills with quality scores and source reports, or search from inside your agent.
Get Rising Skills by email · Read Rising Skills · Install the finder · State of Agent Skills