fix-dependencies Skill
Fix all vulnerabilities on the current branch using npm audit. Local branch only — no ADO/GitHub queries. Published by microsoft in powerplatform-build-tools.
What is fix-dependencies Skill?
Fix all vulnerabilities on the current branch using npm audit. Local branch only — no ADO/GitHub queries. Published by microsoft in powerplatform-build-tools. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Security review use cases
Technical details
- Install or run with Copy skill directory
When to use fix-dependencies Skill
- Use it for security review.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/powerplatform-build-tools
- Skill file: .claude/skills/fix-dependencies/SKILL.md
What it does
Fix all vulnerabilities on the current branch using npm audit. Local branch only — no ADO/GitHub queries.
Skill instructions
Fix Dependencies Fix all vulnerabilities on the current branch using npm audit. No user input required. Scope: local branch only — no origin sync, no ADO queries, no Dependabot. For S360 / ADO / GitHub alerts use /security-alerts. --- Step 1 — Audit bash npm audit --json 2&1 Build a fix list. For each vulnerability, apply the first matching rule: | Condition | Action | | --------- | ------ | | patchedversion exists | Fix it — patch/minor/major all acceptable for security | | inBundle: true, parent has newer version | Upgrade parent (Strategy B) | | inBundle: true, no parent upgrade | Patch lock file directly (Strategy C) | | patchedversion: null | Accept risk, document, move on | | scope: development + low severity + no patch | Accept risk, move on | Known permanent accepted risk — do not flag: elliptic (GHSA-848j-6mx2-7j84) via rewiremock — dev-only, no patched version. --- Step 2 — Fix (no pausing between fixes) Strategy A — npm override (non-bundled transitive dep) Add/update the en
Explore related resources
Frequently asked questions
What is fix-dependencies?
fix-dependencies is a open-source AI agent skill with Copy skill directory. Fix all vulnerabilities on the current branch using npm audit. Local branch only — no ADO/GitHub queries.
Who is fix-dependencies best for?
fix-dependencies is best for reusing agent instructions, scripts, and references, security review workflows.
How do I install fix-dependencies?
Install or run fix-dependencies using Copy skill directory. Check fix-dependencies for the latest setup command.
Is fix-dependencies actively maintained?
fix-dependencies may need a closer maintenance check before production use.
Auto-fetched from GitHub.
