agentleFS
Sign inStart free
gemini-cli-extensionsgemini-cli-extensions/security/skills/dependency-manager/SKILL.md

dependency-manager

Skill794 starsChanged 7 months agoApache-2.0View on GitHub

Safely resolve and install isolated dependencies for isolated sandboxes (PoC execution).

3 other projects use a version of this.

Adopted by

Most recently taken up by

  • Other versions3 projects use a version of this.

    Word for word · 0

    None found.

    Edited · 0

    None found.

    Wrote their own version · 3

    1. jshsakura/awesome-opencode-skills★ 30same name
    2. belokonm/claude-supercode-skills★ 11same name
    3. gwonvibe/gwonvibe-agent-skills★ 4same name

    How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.

  • In this repository2 other files it gives its agents.

The file

We split this skill into the rules it gives an agent

4 rules. About 0 are common, 1 is distinctive, and 3 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈1

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 3

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Very specific:

    Use an MCP read_file tool to locate and read the closest dependency manifest files walking up from the targetFile coordinate.

    line 11
  2. Very specific:

    C++: Check for conanfile.txt or CMakeLists.txt.

    line 14
  3. Distinctive:

    Read the manifest files to find the exact version constraints for packages used in the PoC/verification code.

    line 18
  4. Very specific:

    Call the install_dependencies Tool passing the absolute path to the generated script in the scriptPath argument AND providing targetFile as …

    line 24

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Proceed with these steps to ensure isolated execution while bypassing full installer locks.

Instructions:

  1. Locate and Read Dependency Files:
    • Use an MCP read_file tool to locate and read the closest dependency manifest files walking up from the targetFile coordinate.
    • TypeScript/Node.js: Grab package.json and package-lock.json.
    • Python: Grab requirements.txt or Pipfile.lock.
    • C++: Check for conanfile.txt or CMakeLists.txt.
    • Go: Grab go.mod and go.sum.
    • Java: Grab pom.xml (Maven) or build.gradle/build.gradle.kts (Gradle).
  2. Extract Version Constraints:
    • Read the manifest files to find the exact version constraints for packages used in the PoC/verification code.
  3. Bypass Full Installs (Node.js):
    • Instruct commands to utilize prefixes like npm_config_cache=.npx_cache so downloads bypass global proxy auth locks.
  4. Write Deterministic Running Script:
    • Generate a standalone dependency runner file on disk named deterministically e.g., install_deps_<target_file_base>.sh (or .js/.py).
  5. Trigger Isolated Execute:
    • Call the install_dependencies Tool passing the absolute path to the generated script in the scriptPath argument AND providing targetFile as an argument to let the tool calculate isolated execution contexts.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free