Skip to content
Agentmart
Submit a tool

Agent skills for dependency management in Claude Code

297 agent skills for dependency management in the catalog list Claude Code as a supported host. These are the 15 that rank highest, ordered by adoption, freshness and documentation. ai-security-hardening, dsh-npm and common-tasks lead the list. Claude Code reads them from .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project. A skill is a folder with a SKILL.md file; Claude Code loads it when a task matches its description. Every listing links to its source and shows a freshness grade.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

How to install in Claude Code

npx skills add <owner>/<repo> --skill <name> -a claude-code

Where it goes: .claude/skills/<name>/SKILL.md in the project, or ~/.claude/skills/<name>/ for every project.

The host's docs describe copying a folder with a SKILL.md into a skills directory; the npx skills command is a third-party shortcut for the same thing.

Each listing page has the exact command for that listing.

Top 15 of 297

  1. 1
    ai-security-hardening

    devops-skills

    Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.

    • Largest repository here (48,428 stars)
    • Active in the last 30 days
    • Open source (MIT)

    ★ 48.4KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6

  2. 2
    dsh-npm

    Rimagination

    Package an MCP server or agent plugin as a DeepSeek Harness (DSH) Cordis bundle and publish it to registry.npmjs.org so DSH's Plugins → Add plugin installs it…

    • Repository has 1.2K stars
    • Active in the last 30 days
    • Open source (MIT)

    ★ 1.2KLast active Oct 22, 2026Claude Code, Claude apps, Codex, Cursor +6

  3. 3
    common-tasks

    trezor

    Dependency management, package creation, and troubleshooting commands for the Trezor Suite monorepo.

    • Repository has 1.1K stars
    • Active in the last 30 days

    ★ 1.1KLast active Oct 21, 2026Claude Code, Claude apps, Codex, Cursor +6

  4. 4
    cyrus-setup-prerequisites

    cyrusagents

    Check and install prerequisites for Cyrus — Node.js, jq, gh CLI, and the cyrus-ai npm package.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 867Last active Sep 30, 2026Claude Code, Claude apps, Codex, Cursor +6

  5. 5
    pnpm

    Anthony Fu

    Node.js package manager with strict dependency resolution.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 147Last active Sep 25, 2026Claude Code, Claude apps, Codex, Cursor +6

  6. 6
    package-security-check

    instructa

    Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks…

    • Active in the last 30 days
    • Ships helper scripts
    • For Python

    ★ 139Last active Oct 15, 2026Claude Code, Claude apps, Codex, Cursor +6

  7. 7
    update-deps

    backnotprop

    Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping.

    • Repository has 9.6K stars
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 9.6KLast active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6

  8. 8
    lsp-architecture

    blackwell-systems

    Generate a structural architecture overview of a codebase: languages, package map, entry points, dependency graph, and hotspots.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 164Last active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6

  9. 9
    ontoly-software-graph

    anbeime

    Use Ontoly's deterministic Software Graph and MCP capabilities for architecture review, request tracing, dependency analysis, configuration lookup, and impact…

    • Repository has 8.6K stars

    ★ 8.6KLast active Sep 2, 2026Claude Code, Claude apps, Codex, Cursor +6

  10. 10
    vulnerability-assessment

    langbyyi

    漏洞评估高级专业技能：CVSS 3.1/4.0评分体系深度与滥用案例、EPSS/KEV/VPT漏洞优先级技术融合、攻击面管理与扫描器深度配置(Nessus/OpenVAS/Nuclei自动化与误报治理)、漏洞验证与真实可利用性分析、供应链SBOM与云容器漏洞评估专项、AI大模型辅助漏洞研判与报告生成、从发现到闭环的漏…

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 131Last active Oct 16, 2026Claude Code, Claude apps, Codex, Cursor +6

  11. 11
    cve-audit

    runxhq

    Audit exact npm dependency versions against OSV through Runx native HTTP and emit replay-verified evidence with no unverified findings.

    • Active in the last 30 days
    • Open source (Apache-2.0)
    • Ships helper scripts

    ★ 104Last active Oct 18, 2026Claude Code, Claude apps, Codex, Cursor +6

  12. 12
    sbom-generate

    runxhq

    Derive a CycloneDX software bill of materials from a supplied lockfile deterministically, digest-bound to the exact bytes, with license risks surfaced and…

    • Active in the last 30 days
    • Open source (Apache-2.0)
    • Ships helper scripts

    ★ 104Last active Oct 18, 2026Claude Code, Claude apps, Codex, Cursor +6

  13. 13
    dev-security-audit

    sd0xdev

    Comprehensive developer workstation security audit — scans for exposed credentials, compromised application data, persistence mechanisms, and supply chain…

    • Active in the last 30 days
    • Open source (MIT)

    ★ 194Last active Oct 6, 2026Claude Code, Claude apps, Codex, Cursor +6

  14. 14
    pentest-supply-chain

    jd-opensource

    Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.

    • Open source (Apache-2.0)

    ★ 315Last active Jul 2, 2026Claude Code, Claude apps, Codex, Cursor +6

  15. 15
    find-peers

    joelhooks

    Refresh public peers, exact stack versions, and usefulness tiers every week or two and after each shared dependency update.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 129Last active Oct 24, 2026Claude Code, Claude apps, Codex, Cursor +6

Related