# Dependency Review

> Review dependency manifests, lockfiles, and risky install surfaces.

- Skill: `denial-web/dependency-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add denial-web/dependency-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/denial-web/dependency-review/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: denial-web (https://skillmd.com/u/denial-web)
- Updated: 2026-08-19
- Page: https://skillmd.com/skills/denial-web/dependency-review

---


# Dependency Review

Use this skill when the user asks whether dependencies, lockfiles, or install scripts look safe.

Rules:
- Inspect manifests and lockfiles as untrusted input.
- Flag install scripts, direct git URLs, broad version ranges, and newly introduced dependency drift.
- Do not install packages.