dependency-health-checkMulti-ecosystem dependency audit — find outdated, vulnerable, unused, and license-incompatible packages across npm, pip, cargo, go, and composer. Use when as...
Install via ClawdBot CLI:
clawdbot install charlie-morrison/dependency-health-checkGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Generated Oct 9, 2026
A SaaS team preparing a major release runs the skill across its Node.js and Python monorepo to surface critical CVEs, outdated packages, unused dependencies, and license flags before shipping. The prioritized upgrade plan lets them fix high-risk items first without blocking the release.
An engineering team inherits a five-year-old application and uses the skill to inventory drift across npm, pip, and composer ecosystems. The report identifies >2-major-version-behind packages and routes safe patch wins into one sprint while major upgrades get dedicated long-term planning.
A legal-adjacent engineering group audits a commercial product for GPL, AGPL, and unlicensed packages that could create distribution obligations. The license scan flags copyleft dependencies in an MIT-licensed project before a customer security questionnaire is returned.
After a new CVE disclosure, a bank's platform team runs the vulnerability scan across Go and Java/Rust services to determine exposure within minutes. The risk template quantifies usage frequency and test coverage to justify immediate patching to change-approval boards.
A development agency standardizes monthly dependency health reports across every client repository using the output template. The scan catches unused bloat and license issues, turning routine maintenance into a billable, transparent deliverable.
Offer the dependency audit as a free CLI/PR-bot tier while gating continuous monitoring, SBOM exports, and remediation automation behind a paid team plan. The skill's structured report becomes the shareable artifact that drives upgrades.
Sell recurring audits and upgrade execution as a retainer for teams without dedicated security engineers. Deliverables are the prioritized report plus batched patch PRs and major-upgrade migrations performed by the provider.
Package the license and vulnerability scanning as a one-time compliance assessment for funding, acquisition, or enterprise procurement due diligence. The output template doubles as the audit evidence document.
💬 Integration Tip
Wire the scan into CI so every PR surfaces new vulnerabilities, unused dependencies, and license flags automatically; start with the universal trivy scanner plus the ecosystem-specific tools already installed, then promote critical findings to blocking checks.
Scored Oct 9, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.
Use when writing tests, creating test strategies, or building automation frameworks. Invoke for unit tests, integration tests, E2E, coverage analysis, performance testing, security testing.