Install
$ agentstack add skill-aretedriver-ai-skills-deps ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Deps Skill
Check project dependencies for updates and security issues.
Usage
/deps # Check all dependencies
/deps --outdated # Show outdated only
/deps --security # Security audit
/deps --update # Update to latest
Process
- Check outdated packages
``bash source .venv/bin/activate pip list --outdated --format=columns ``
- Security audit
```bash # Install pip-audit if needed pip install pip-audit
# Run audit pip-audit ```
- Show dependency tree
``bash pip install pipdeptree pipdeptree ``
Quick Commands
# List outdated
pip list --outdated
# Update all (careful!)
pip list --outdated --format=freeze | cut -d= -f1 | xargs pip install --upgrade
# Update specific package
pip install --upgrade requests
# Check for conflicts
pip check
# Export current versions
pip freeze > requirements.lock
Security Audit
# Using pip-audit
pip-audit
# Using safety (alternative)
pip install safety
safety check
# Check specific requirements file
pip-audit -r requirements.txt
Output Format
Outdated Packages:
Package Current Latest
--------- ------- ------
requests 2.28.0 2.31.0
pytest 7.2.0 7.4.0
Security Issues:
Found 1 vulnerability:
- requests 2.28.0: CVE-2023-XXXXX (upgrade to 2.31.0)
Dependency Tree:
my-package==1.0.0
├── requests==2.31.0
│ ├── certifi>=2017.4.17
│ └── urllib3>=1.21.1
└── PyQt6==6.6.0
Updating Dependencies
# Update pyproject.toml deps
# Then reinstall
pip install -e . --upgrade
# Or update lock file
pip-compile pyproject.toml -o requirements.lock
pip install -r requirements.lock
Tips
- Check deps weekly for security updates
- Pin major versions in pyproject.toml
- Use requirements.lock for reproducible builds
- Test after updates:
pytest
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: AreteDriver
- Source: AreteDriver/ai-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.