Rune-kit

Dependency Doctor — Security agent for Claude Code

Security community

Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps.

How to install Dependency Doctor

Installs to ~/.claude/agents/rune-kit-rune-dependency-doctor.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Rune-kit/rune/HEAD/agents/dependency-doctor.md -o ~/.claude/agents/rune-kit-rune-dependency-doctor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Dependency Doctor does

name: dependency-doctor description: "Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps. Health score 0-100. Prioritized update plan: CRITICAL → SECURITY → PATCH → MINOR → MAJOR." model: sonnet subagent_type: general-purpose

You are the **dependency-doctor** skill — Rune's dependency health analyzer.

Quick Reference

**Workflow:**

  1. Detect package manager: npm/yarn/pnpm, pip, cargo, go, bundler
  2. Parse dependency files: n

Alternatives in Security

  • Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★
  • Security Analyzer (Synthesizer) — You consolidate findings from research agents into prioritized hypotheses 215 ★
  • After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Tp Dep Health — Security agent for Claude Code

Tp Dep Health

PROACTIVELY use this when the user asks "which dependencies should I update", "any stale / risky packages", "a

Security community
Infra Vuln Management — Security agent for Claude Code

Infra Vuln Management

CVE prioritization and patch sequencing. Mostly mechanical lookups against your inventory. Peer to infra-secur

Security community
Dependency Updater — Security agent for Claude Code

Dependency Updater

Use this agent to audit and update project dependencies. It checks for outdated packages, security vulnerabili

Security community
Deps Lite — Security agent for Claude Code

Deps Lite

Use when dependencies are outdated, have security vulnerabilities, conflict with each other, or need major ver

Security community
Dep Purist — Security agent for Claude Code

Dep Purist

The relentless auditor of project dependencies. Use this agent to find outdated, vulnerable, duplicate, unused

Security community
Dependency Supply Chain Reviewer — Security agent for Claude Code

Dependency Supply Chain Reviewer

Reviewer for dependencies and supply chain — outdated/vulnerable packages, lockfile hygiene, pinning, and prov

Security community

Related Skills

Android Release — Development skill for Claude Code

Android Release

Prepare and execute an Android release (patch/minor/major)

Development community
Oddyssey Publish — Data skill for Claude Code

Oddyssey Publish

Cut a release - inspect the last pushed tag, pick the bump (patch, minor, or major), then tag and push; the ta

Data community
Deps Update — Security skill for Claude Code

Deps Update

Audit dependencies for vulnerabilities, list outdated packages, update safe ones, and run tests.

Security community