Skip to content
Back to skills

Version Guard

BSecurity

Verify and enforce use of the latest stable library/package versions using live documentation lookups instead of training-data knowledge. Use PROACTIVELY whenever: (1) Recommending or selecting a library, framework, or package version, (2) Adding dependencies to any project (package.json, pyproject.toml, requirements.txt, Cargo.toml, go.mod, Gemfile, pom.xml, build.gradle, composer.json, etc.), (3) A user asks "what version of X should I use?" or similar version questions, (4) Writing code ex...

  • 3 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added May 26, 2026
developmentrustgogitapidocumentation

Works with

  • api
  • mcp

Security analysis

B84/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 3 files and shows the line behind each finding

Scanned May 27, 2026

npx -y skills add zircote/version-guard --skill version-guard --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Version Guard?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Version Guard
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/zircote-version-guard/badge)](https://www.skillsdirectory.com/skills/zircote-version-guard)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: version-guard
description: >
  Verify and enforce use of the latest stable library/package versions using live documentation
  lookups instead of training-data knowledge. Use PROACTIVELY whenever:
  (1) Recommending or selecting a library, framework, or package version,
  (2) Adding dependencies to any project (package.json, pyproject.toml, requirements.txt,
  Cargo.toml, go.mod, Gemfile, pom.xml, build.gradle, composer.json, etc.),
  (3) A user asks "what version of X should I use?" or similar version questions,
  (4) Writing code examples that import or configure version-sensitive libraries,
  (5) Suggesting install commands (npm install, pip install, cargo add, go get, etc.),
  (6) Upgrading or auditing existing dependencies.
---

# Version Guard — Proactive Version Verification

You are a version-aware assistant. Before recommending any library version, you MUST verify
the current stable release against live documentation. Never trust training-data version knowledge.

## When to Activate

Trigger automatically when you detect any of these contexts:

- About to recommend a specific package version
- Writing an install command (`npm install`, `pip install`, `cargo add`, `go get`, etc.)
- Adding or modifying dependency files
- Writing code that imports version-sensitive APIs
- User asks about versions, compatibility, or "latest"
- Generating project scaffolds or starter templates

## Verification Workflow

### Step 1 — Load Context7 Tools

The context7 MCP tools are deferred. Load them first:

```
ToolSearch query: "+context7"
```

This loads `mcp__context7__resolve-library-id` and `mcp__context7__query-docs`.

### Step 2 — Resolve the Library

```
mcp__context7__resolve-library-id
  libraryName: "<package-name>"
  query: "latest version installation"
```

Select the result with the highest relevance and documentation coverage.

### Step 3 — Query Current Documentation

```
mcp__context7__query-docs
  libraryId: "<resolved-id>"
  query: "latest version installation getting started"
```

Extract:
- Current stable version number
- Installation instructions
- Breaking changes from prior major versions

### Step 4 — Apply the Verified Version

- Use the verified latest stable version in all recommendations and install commands
- If the verified version differs from training data, note explicitly:
  `"Using <library> v<latest> (verified current — training data may reference v<old>)"`

### Step 5 — Flag Breaking Changes

When upgrading from an older version:
- Note major API changes briefly
- Reference migration docs if available
- Warn about deprecated patterns

## Fallback Strategy

If context7 cannot resolve the library:
1. Search the web for `"<library> latest version <current-year>"`
2. Check GitHub releases or the package registry (npm, PyPI, crates.io, etc.)
3. State the source: `"Per <source>, latest stable is v<X>"`

## Ecosystem Reference

For dependency file formats and context7 naming conventions across all major ecosystems,
see [../../references/ecosystem-patterns.md](../../references/ecosystem-patterns.md).

Files in this skill

  • SKILL.md3 KB
  • evals/evals.json6.1 KB
  • evals/trigger-eval.json1.9 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.