Review outdated dependencies, security-scan each candidate bump against OSV.dev, then apply only the safe updates and PR them. Use when asked to 'review dependency updates', 'what can/should be updated', 'are we exposed to <supply-chain attack>', 'bump dependencies safely'.
Installs into .claude/skills of the current project.
Are you the author of Review Dependency Updates?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/craigcossairt-review-dependency-updates-trellis)
---
name: review-dependency-updates
description: Review outdated dependencies, security-scan each candidate bump against OSV.dev, then apply only the safe updates and PR them. Use when asked to 'review dependency updates', 'what can/should be updated', 'are we exposed to <supply-chain attack>', 'bump dependencies safely'.
---
Router, not a procedure. Cursor does not auto-load Claude Code skills, so this file exists
only to point at the canonical one. Read `.claude/skills/review-dependency-updates/SKILL.md` and follow it.
