Know what a dependency update changes before you merge.
What it does
Reviews dependency update PRs and produces evidence-backed security, quality, and impact assessments with an actionable merge recommendation.
When to use it
Use when a dependency update PR needs a consistent, auditable review and merge decision.
How to use it
Give it a dependency PR, or repository context to select one; it posts research and verdict comments on the live PR.
What you provide
- repository owner and name
Uses
Good to know
- starts 1 helper agents
- starts 3 helper agents
- cannot be undone: GitHub
What you need · 2
Declares the GitHub MCP server required for retrieving live PR context.
Uses this skill for follow-up handoff when post-merge work is identified; whether it is required to complete that handoff is unstated.
Access · 4
This skill
GitHub
Posts research and verdict comments (irreversible)
upstream changelogs
Reads upstream release changes