← ClaudeAtlas

dependency-checklisted

Retrieves dependency vulnerabilities for a repository branch from Qualimetry, then resolves them by upgrading each vulnerable dependency to its next safe version. Uses a per-dependency upgrade advisor to assess risk and applies low-risk upgrades automatically, proposes medium/high-risk upgrades for confirmation, and flags dependencies with no clean upgrade path for manual replacement. Validates all changes with a package restore and build.
Qualimetry/claude-code-qualimetry-ai-app · ★ 1 · AI & Automation · score 80
Install: claude install-skill Qualimetry/claude-code-qualimetry-ai-app
# Dependency Vulnerability Resolution When invoked, follow this four-phase workflow to identify and clear dependency CVE vulnerabilities for the current repository branch. ## Phase 1: Assess Gather repository context and fetch the vulnerability report with inline upgrade advice. 1. Determine the `repositoryName` and `branchName`: **`repositoryName`** — the repository name in `owner/repo-name` format (e.g., `organisation/my-project`). The server is case-insensitive and handles `.git` suffixes automatically. **`analysisName`** *(optional)* — if the repository is a mono-repo with multiple analysis projects, provide the analysis project name to disambiguate. Case-insensitive. Leave empty for single-project repositories. **`branchName`** — run this shell command: ```bash git branch --show-current ``` This returns the `branchName`. 2. Call `get_dependency_vulnerabilities` with `repositoryName`, `branchName`, and optionally `analysisName`. The response includes inline upgrade advice for each dependency: `NextSafeVersion`, `LatestVersion`, `UpgradeRisk`, and `CurrentVersionIsDeprecated`. 3. If the result contains zero vulnerabilities, report that no dependency vulnerabilities were found and stop. 4. Present a brief summary to the user: total vulnerable dependencies, highest risk score, count by ecosystem, and how many have an available safe upgrade. ## Phase 2: Locate Manifests Search the workspace for dependency manifest files so upgrades can be applied. Look for these