Easyuseaide Dependency Research
Use this skill before choosing, adding, upgrading, replacing, or validating any external library, framework, API, SDK, protocol, tool, or fast-changing technical practice, including dependencies selected during a new project build. It is required when editing a dependency manifest to introduce a package that the project did not already use. Do not use it for routine installation from an unchanged…
Install
$ agentstack add skill-john-ops-lab-easyuseaide-easyuseaide-dependency-research ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-john-ops-lab-easyuseaide-easyuseaide-dependency-research) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
外部调研与依赖决策
仅在当前任务确实依赖外部信息、陌生技术或快速变化的版本事实时使用。
如果已有框架负责需求澄清、计划或实施，让它继续作为当前阶段的主流程；本 Skill 只提供依赖决策、供应链和版本兼容检查。复用已有计划与验证证据，不另建第二套实施流程。
调研顺序
- 当前仓库中的版本、锁文件、配置、现有封装和测试；
- 与项目实际版本匹配的官方文档、发布说明和迁移指南；
- 官方示例或上游源码；
- 成熟、持续维护的实现案例；
- 社区讨论和非官方文章。
决策要求
新增、升级或替换依赖前说明：
- 当前要解决的真实问题；
- 项目中是否已有等价能力；
- 候选方案及取舍；
- 与当前语言、运行时和框架版本的兼容性；
- 维护状态、许可证和已知安全风险；
- 对构建、包体积、启动速度、部署和运维的影响；
- 引入后的替换成本和回滚方式。
不要因为某方案流行就采用，也不要为了简单任务进行无关调研。
调研证据至少记录来源、核验日期、适用版本、许可证和安全结论。优先链接官方文档、发布说明、上游仓库与官方安全公告；没有查到不等于不存在，应写“未确认”，不要写“无风险”。
需要形成可交接记录时，按需读取 assets/templates/dependency-decision.md。保持一张简洁决策表，不复制长篇网页内容。
实施要求
- 优先使用项目已经采用的依赖管理方式；
- 不手工绕过锁文件和版本约束；
- 升级时阅读 Breaking Changes 和迁移说明；
- 必要时先做最小验证实验；
- 更新依赖后运行与影响范围相匹配的测试；
- 记录实际采用的版本和关键兼容结论；
- 正式项目生成并提交当前生态支持的锁文件；只有宽松版本范围而没有锁文件或等价的完全固定依赖集合时，不得声称安装可重复；
- 计划公开到已知代码托管平台时，把基础 CI 与本地等价命令纳入交付门禁；
- 未验证的兼容性不得描述为已经支持。
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: john-ops-lab
- Source: john-ops-lab/EasyUseAIDE
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.