SkillsAdd

gemini-cli-extensions/security · Archived

dependency-manager

Safely resolve and install isolated dependencies for isolated sandboxes (PoC execution).

First seen Apr 7, 2026

Installation

$ npx skills add gemini-cli-extensions/security --skill dependency-manager
View on skills.sh ↗ GitHub repository ↗

Stronger alternatives

This repository is archived — consider an actively maintained alternative.

security-patcher Same source · more installs
gemini-cli-extensions/security

Invoke this as your absolute first action before using any other tools whenever a user requests…

11 installs
poc Same source
gemini-cli-extensions/security

Sets up the necessary workspace, directories, and dependencies to test a vulnerability and gene…

10 installs
golang-dependency-management Similar · more installs
samber/cc-skills-golang

Dependency management for Golang projects — go.mod and go.sum, `go get` install and upgrade flo…

37.1K installs
golang-dependency-injection Similar · more installs
samber/cc-skills-golang

Comprehensive guide for dependency injection (DI) in Golang. Covers why DI matters (testability…

36.9K installs

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

dependency-upgrade Similar name
wshobson/agents

Manage major dependency version upgrades with compatibility analysis, staged rollout, and compr…

9.8K installs
dependency-updater Similar name
softaworks/agent-toolkit

Smart dependency management for any language. Auto-detects project type, applies safe updates a…

3.9K installs
dependency-confusion Similar name
yaklang/hack-skills

>- Supply-chain testing via package-manager dependency confusion: when internal package names r…

2.9K installs
spring-boot-dependency-injection Similar name
giuseppe-trisciuoglio/developer-kit

Provides dependency injection patterns for Spring Boot projects, including constructor-first de…

2.8K installs
fusion-dependency-review Similar name
equinor/fusion-skills

Review dependency PRs with structured research, existing-PR-discussion capture, multi-lens anal…

1.9K installs
maui-dependency-injection Similar name
dotnet/skills

Guidance for configuring dependency injection in .NET MAUI apps — service registration in MauiP…

1.5K installs

Also in this package

Other skills from gemini-cli-extensions/security.

npx skills add gemini-cli-extensions/security
security-patcher 11 poc 10

Browse all from gemini-cli-extensions/security

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 791
License LICENSE
Default branch main
Open issues 44
Status Archived

Skill metadata

Parsed from SKILL.md frontmatter.

Declared agents gemini

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,528 B
  • docs SUMMARY.md 114 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 10 installs

SKILL.md

Proceed with these steps to ensure isolated execution while bypassing full installer locks.

Instructions:

  1. Locate and Read Dependency Files:

Use an MCP read_file tool to locate and read the closest dependency manifest files walking up from the targetFile coordinate. TypeScript/Node.js: Grab package.json and package-lock.json. Python: Grab requirements.txt or Pipfile.lock. C++: Check for conanfile.txt or CMakeLists.txt. Go: Grab go.mod and go.sum. Java: Grab pom.xml (Maven) or build.gradle/build.gradle.kts (Gradle).

  1. Extract Version Constraints:

* Read the manifest files to find the exact version constraints for packages used in the PoC/verification code.

  1. Bypass Full Installs (Node.js):

* Instruct commands to utilize prefixes like npmconfigcache=.npx_cache so downloads bypass global proxy auth locks.

  1. Write Deterministic Running Script:

* Generate a standalone dependency runner file on disk named deterministically e.g., installdeps<targetfilebase>.sh (or .js/.py).

  1. Trigger Isolated Execute:

* Call the install_dependencies Tool passing the absolute path to the generated script in the scriptPath argument AND providing targetFile as an argument to let the tool calculate isolated execution contexts.