Dependency Watch — Development skill for Claude Code
Check new vulnerability advisories against portfolio dependencies and route affected repositories into findings.
How to install Dependency Watch
Installs to ~/.claude/commands/openshift-traust-dependency-watch.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/openshift/traust/HEAD/.claude/commands/dependency-watch.md -o ~/.claude/commands/openshift-traust-dependency-watch.md Restart Claude Code, or start a new session, for it to be picked up.
What Dependency Watch does
description: "Check new vulnerability advisories against portfolio dependencies and route affected repositories into findings."
Run the advisory-driven dependency lane using the dependency-watch skill. Load the skill at .claude/skills/dependency-watch/SKILL.md and follow its procedure — refresh the feeds (fetch_feeds.py), determine the new-advisory set (or the single CVE passed in $ARGUMENTS), run impact analysis per advisory (run_impact_analysis.py; check portfolio-graph freshness firs
Alternatives in Development
- /hunt — Active vulnerability hunting on a target 1.8k ★
- Dependency Health Check — Execute the deps-health-inline skill for inline orchestration 172 ★
- Brief Compliance Check — Check a LaTeX coursework submission against the requirements in a supplied 130 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Q Reality Check
Challenger mode. Argue AGAINST current hypotheses and findings to find weak spots.
Hallucination Check
Catch invented APIs, fabricated signatures, and non-existent imports — cross-referenced against your actually-
Moon Query
Query moon projects and tasks - find affected projects, filter by tags, explore the dependency graph
Portfolio Triage
Claude Code skill: periodic portfolio triage over auto-memory — scores, stales, and ranks every live project i
Dispatcher
Pick the next-best repo to work on across the portfolio — rank free repos, recommend one, claim its lease atom
Repo Sync
Check if focused repositories are up to date with the remote. Fetches latest changes and warns about repos tha
Related Agents
Dep Auditor
Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant
Chadi Explorer
Read-only repo explorer for architecture, affected files, dependencies, route maps, and codebase context.
Platform Archaeologist
Build complete infrastructure memory by traversing repositories and mapping all dependencies, migrations, and