360 Secure SkillHub
360 安全技能中心

Skylv Dependency Updater

核心功能:自动识别npm/pip/cargo/go等包管理器,扫描依赖更新,按版本类型评估风险,展示变更日志及破坏性变化,支持分阶段更新并建议测试。典型场景:用户主动请求更新依赖、项目日常维护。输入为指定触发词,输出分类更新风险报告,确认后执行更新。

sky-lv
sky-lv
热度 40.51
最近更新 2026-05-11 17:44:32
分类:开发依赖:代码执行 / 读写文件应用场景:DevOps / 自动化脚本

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add skylv-dependency-updater
Metadata
name
skylv-dependency-updater
slug
skylv-dependency-updater
version
1.0.0
description
Auto-checks and updates outdated dependencies. Shows changelogs and breaking changes before updating. Triggers: update dependencies, upgrade packages, check outdated, npm update.
author
SKY-lv
license
MIT
tags
["dependencies","npm","pip","update","devops"]
keywords
["dependencies","npm","pip","update","upgrade","package"]
triggers
update dependencies, upgrade packages, check outdated

Dependency Updater

Overview

Scans project dependencies and checks for updates, shows changelogs, identifies breaking changes.

When to Use

  • User asks to "update dependencies" or "check for updates"
  • Regular maintenance

How It Works

Step 1: Detect package manager

package.json -> npm pyproject.toml -> pip Cargo.toml -> cargo go.mod -> go

Step 2: Check outdated

npm: npm outdated --json pip: pip list --outdated --format=json cargo: cargo outdated

Step 3: Risk assessment

Patch (1.2.3 -> 1.2.4): Low risk - auto-update Minor (1.2.3 -> 1.3.0): Medium - show changelog Major (1.2.3 -> 2.0.0): High - show breaking changes

Output Format

Major Updates: express 4.17.1 -> 5.0.0 [BREAKING changes] Minor Updates: axios 0.21.1 -> 0.21.4 [Bug fixes] Patch Updates: debug 4.3.1 -> 4.3.4 [Security patch]

Update Strategy

  1. Show report first - never update blindly
  2. Update in stages: patches -> minors -> majors
  3. Run tests after each update
  4. Commit each update separately