/dependency-check
Audit dependencies for updates and vulnerabilities
$ npx -y skills add CoWork-OS/CoWork-OS --skill dependency-check --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/dependency-check
Context preview
The summary Claude sees to decide when to auto-load this skill.
Audit dependencies for updates and vulnerabilities
SKILL.md
dependency-check.SKILL.mdname: dependency-check description: "Audit dependencies for updates and vulnerabilities"
Dependency Check
Purpose
Audit dependencies for updates and vulnerabilities
Routing
- Use when: Use when requested to inspect dependency freshness, vulnerabilities, or deprecated packages.
- Do not use when: Don't use for single-file code changes without project dependency context.
- Outputs: Dependency audit table with stale versions, risk flags, and safe upgrade notes.
- Success criteria: Identifies package manager, flags vulnerability and deprecation signals, and gives practical upgrade sequencing.
Trigger Examples
Positive
- Use the dependency-check skill for this request.
- Help me with dependency check.
- Use when requested to inspect dependency freshness, vulnerabilities, or deprecated packages.
- Dependency Check: provide an actionable result.
Negative
- Don't use for single-file code changes without project dependency context.
- Do not use dependency-check for unrelated requests.
- This request is outside dependency check scope.
- This is conceptual discussion only; no tool workflow is needed.
Runtime Prompt
- Current runtime prompt length: 501 characters.
- Runtime prompt is defined directly in `../dependency-check.json`.
Local-first personal agentic OS and everything app for coding, knowledge work, web design, automations, and artifacts.
Repo: CoWork-OS/CoWork-OS
Other skills on cowork-os.
- /attack-path-analysis
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
Open skill - /deep-security-scan
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated independent repository-wide discovery passes with worker-specific threat models, semantically merge candidates, synthesize one canonical validation
Open skill - /finding-discovery
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate security findings in a repository or code change. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
Open skill - /fix-finding
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.
Open skill - /security-diff-scan
Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed change set.
Open skill - /security-scan
Use when the user asks for a repository-wide or scoped-path security scan.
Open skill