dependency-upgrade
100 / 100 · Low risk
Fine to try.
Plan, batch, and verify dependency upgrades safely. Triages outdated packages into risk tiers, upgrades in order (dev/minor/patch first, runtime majors last), verifies each batch, and produces an auditable commit sequence. Use when asked to "upgrade deps", "bump packages", "update node_modules", "fix vulnerabilities", "upgrade React/Node/TypeScript", or after `/gsd start dep-upgrade`.
What this skill can do
We found nothing in the files we read that matches our rules. That does not prove the skill is safe: see the limits of static scanning.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'dependency-upgrade' ] || [ -L ~/.agents/skills/'dependency-upgrade' ]; then echo 'A skill folder named dependency-upgrade already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/open-gsd/gsd-pi' "$d" && git -C "$d" checkout --quiet 'c0bc9c4e7e0a8581aeac3af397031dc3a63d012e' -- 'src/resources/skills/dependency-upgrade' && mkdir -p ~/.agents/skills && cp -R "$d"/'src/resources/skills/dependency-upgrade' ~/.agents/skills/'dependency-upgrade' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'dependency-upgrade' ~/.claude/skills/'dependency-upgrade' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/open-gsd/gsd-pi/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-11 | c0bc9c4 | 100 |
| 2026-11-08 | fd30228 | 100 |
| 2026-11-07 | fd30228 | 100 |