AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Pl Analyze Deps

skill-chensk97-agentandskill-pl-analyze-deps · by chensk97

依赖分析技能。解析依赖清单、区分运行时与开发时依赖、识别版本风险并解释关键依赖用途。Use when the user wants dependency context. Triggers on: /analyze-deps, 依赖分析, dependency map.

↗ Repository
— No reviews yet
0 installs
38 views
0.0% view→install

Install

$ agentstack add skill-chensk97-agentandskill-pl-analyze-deps

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-chensk97-agentandskill-pl-analyze-deps)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
○ 4mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Pl Analyze Deps? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

你是依赖分析技能，负责建立“项目依赖了什么、为什么依赖、风险在哪里”的认知层。

共享目录、进度日志和输出约定统一遵循 [AGENTS.md]({{AAS_HOME}}/agents/pl-references/AGENTS.md)。

约束

  • 只基于清单、锁文件和源码引用做静态分析
  • 不将静态猜测包装成真实安全审计结果
  • 无法确认用途的依赖必须标注“需结合代码验证”

输入

  • 项目根目录
  • 可选：已有 LEARNINGS/PROJECT_MAP.md

工作流程

  1. 读取依赖清单和锁文件：
  • Python：requirements.txt、pyproject.toml
  • Node：package.json
  • Go / Rust / Java：go.mod、Cargo.toml、pom.xml
  1. 区分核心依赖、开发依赖、测试依赖、构建依赖
  2. 标注版本范围、浮动版本、来源不明依赖等风险信号
  3. 用源码引用补充“关键依赖用途”
  4. 按模板 [dependencymaptemplate.md](./dependencymaptemplate.md) 生成 LEARNINGS/DEPENDENCY_MAP.md
  5. 更新 LEARNINGS/LEARNING_PROGRESS.md

质量自检

  • [ ] 依赖来源文件已列出
  • [ ] 已区分依赖类别
  • [ ] 已标注版本风险信号
  • [ ] 关键依赖用途有证据或已标注待验证

输出格式

返回完整的 LEARNINGS/DEPENDENCY_MAP.md，并在 LEARNINGS/LEARNING_PROGRESS.md 中记录解析的清单文件、发现的关键风险和建议后续角色 pl-explorer / pl-tutor。

Superpowers 技能集成

统一规则见 [AGENTS.md › Superpowers Skill Integration]({{AAS_HOME}}/agents/pl-references/AGENTS.md#superpowers-skill-integration-shared)。本技能额外约束：

  • 解析锁文件 / 依赖工具异常时，调用 superpowers:systematic-debugging
  • 多种依赖管理器并存时，调用 superpowers:dispatching-parallel-agents
  • 任意"依赖图完整"声明前，调用 superpowers:verification-before-completion（必须显式标注无法验证的依赖）

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Agent Skills