Fix CVEs in project dependencies end-to-end. Use when the user wants to fix a security vulnerability, mentions a CVE ID, runs a security audit and finds vulnerabilities, or asks why their build is failing due to a security check. Surface the CVE, trace the affected dependency to its version source, research the fix online, upgrade if a patched version exists, suppress only as a last resort. Works across Maven, npm, Go, Python, Rust, and Ruby projects.
Handle Renovate bot dependency update branches end-to-end. Use this skill whenever working on a renovate/* branch, reviewing a Renovate MR, or asked to "handle renovate", "process a renovate update", "fix a renovate branch", or "apply a dependency upgrade". The skill identifies what was upgraded, researches breaking changes, adapts code, and verifies builds and tests pass.
A collection of Claude Code skills.
/renovateHandles Renovate bot dependency update branches end-to-end.
Renovate bumps versions but can't adapt code to breaking changes. This skill picks up where Renovate left off: identify what changed, research breaking changes, fix the code, and verify builds and tests pass.
Supported ecosystems: Go, Maven/Java, npm/Node.js, Python, Rust/Cargo, Ruby/Bundler
Usage:
/renovate
/renovate renovate/some-branch-name
/cve-fixFixes CVEs in project dependencies end-to-end.
Surfaces vulnerable components, traces the version source, researches the CVE online, upgrades to a patched version when available, and suppresses only as a last resort. Verifies the build passes clean after the fix.
Supported ecosystems: Maven/Java, npm/Node.js, Go, Python, Rust/Cargo, Ruby/Bundler
Usage:
/cve-fix
/plugin marketplace add d-rk/claude-skills
/plugin install renovate@claude-skills
/plugin install cve-fix@claude-skills
Copy the skill's SKILL.md into ~/.claude/skills/<skill-name>/SKILL.md.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
npx claudepluginhub d-rk/claude-skills --plugin renovateTechnical debt reduction, dependency updates, and code refactoring automation
Audit, update, and manage project dependencies with safety checks
Secure dependency upgrades with supply chain protection, cooldown periods, post-install script hardening, lockfile validation, and staged rollout across npm, Bun, pnpm, and Yarn. Use when upgrading dependencies, configuring security policies, or preventing supply chain attacks.
Internal CI skills loaded by tend's GitHub Action. Not for manual installation.
Updates branch names with proper prefixes and formats, enforcing naming conventions, supporting semantic prefixes, and managing remote branch updates.
DevsForge package dependency updater with smart version resolution, breaking change detection, and automated testing