Dependency Watch — Development skill for Claude Code
Check new vulnerability advisories against portfolio dependencies and route affected repositories into findings.
How to install Dependency Watch
Installs to ~/.claude/commands/openshift-traust-dependency-watch.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/openshift/traust/HEAD/.claude/commands/dependency-watch.md -o ~/.claude/commands/openshift-traust-dependency-watch.md Restart Claude Code, or start a new session, for it to be picked up.
What Dependency Watch does
description: "Check new vulnerability advisories against portfolio dependencies and route affected repositories into findings."
Run the advisory-driven dependency lane using the dependency-watch skill. Load the skill at .claude/skills/dependency-watch/SKILL.md and follow its procedure — refresh the feeds (fetch_feeds.py), determine the new-advisory set (or the single CVE passed in $ARGUMENTS), run impact analysis per advisory (run_impact_analysis.py; check portfolio-graph freshness firs
Alternatives in Development
- Dependency Health Check — Execute the deps-health-inline skill for inline orchestration 172 ★
- Brief Compliance Check — Check a LaTeX coursework submission against the requirements in a supplied 130 ★
- Voice Guard — Use to check ONE already-written piece of copy against a voice guide before it ships — it spawns ONE fresh sib 130 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Jev Guard
Probability-scored guardrails for Claude Code: deny rule-breaking edits and unasked-for deploys, route your do
Q Reality Check
Challenger mode. Argue AGAINST current hypotheses and findings to find weak spots.
Axguard Paths
Attack graph + vulnerability chaining (Phase 6). Chains Phase 1-5 findings into multi-hop attack paths. Usage:
Hallucination Check
Catch invented APIs, fabricated signatures, and non-existent imports — cross-referenced against your actually-
Rival Promo
Handle a competitor launching a promotion. rival-watch confirms it, the writer proposes keep / reframe / add f
Moon Query
Query moon projects and tasks - find affected projects, filter by tags, explore the dependency graph
Related Agents
Vuln Discloser
Re-verifies confirmed findings against the latest upstream release and drafts maintainer-ready security adviso
Dep Auditor
Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant
Chadi Explorer
Read-only repo explorer for architecture, affected files, dependencies, route maps, and codebase context.