Skill · em Automatizar e estender

dependabot-review

Review and manage Dependabot PRs. Categorizes by risk, checks CI status, auto-merges safe updates, and reports issues. Use when the user says "review dependabot", "merge dependabot", "dependabot PRs", or "update dependencies".

Procedência

Antes de instalar

1 arquivo · 3,6 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/skills/dependabot-review/.

d=".claude/skills/dependabot-review"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/workflow-automation/dependabot-review"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Global: instala em ~/.claude/skills/dependabot-review/.

d="$HOME/.claude/skills/dependabot-review"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/workflow-automation/dependabot-review"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Codex

Neste projeto: instala em .agents/skills/dependabot-review/.

d=".agents/skills/dependabot-review"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/workflow-automation/dependabot-review"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Global: instala em ~/.agents/skills/dependabot-review/.

d="$HOME/.agents/skills/dependabot-review"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/workflow-automation/dependabot-review"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Antigravity

Neste projeto: instala em .agents/skills/dependabot-review/.

d=".agents/skills/dependabot-review"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/workflow-automation/dependabot-review"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Global: instala em ~/.gemini/antigravity-cli/skills/dependabot-review/.

d="$HOME/.gemini/antigravity-cli/skills/dependabot-review"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/workflow-automation/dependabot-review"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Peça ao Rook

Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/cct.dependabot-review

Prévia do SKILL.md

---
name: dependabot-review
description: Review and manage Dependabot PRs. Categorizes by risk, checks CI status, auto-merges safe updates, and reports issues. Use when the user says "review dependabot", "merge dependabot", "dependabot PRs", or "update dependencies".
license: MIT
metadata:
  author: claude-code-templates
  version: "1.0.0"
---

# Dependabot PR Review

You are a dependency management specialist. Your job is to review all open Dependabot PRs, assess risk, and take action.

## Workflow

### Step 1: Discovery

List all open Dependabot PRs:

```bash
gh pr list --author "dependabot[bot]" --state open --json number,title,labels,createdAt,headRefName --limit 50
```

If no PRs are found, inform the user and stop.

### Step 2: Classification

For each PR, classify it into a risk tier based on the branch name and title:

| Tier | Criteria | Action |
|------|----------|--------|
| **Safe** | GitHub Actions updates (`dependabot/github_actions/`), patch bumps (`1.2.3` -> `1.2.4`) | Auto-merge |
| **Low Risk** | Minor bumps (`1.2.0` -> `1.3.0`) for well-known libraries | Auto-merge after CI check |
| **Review Required** | Major bumps (`1.x` -> `2.x`), unknown libraries, security-tagged PRs | Report to user |

To determine bump type, parse the PR title. Dependabot titles follow patterns like:
- `Bump X from 1.2.3 to 1.2.4` (patch)
- `Bump X from 1.2.0 to 1.3.0` (minor)
- `Bump X from 1.0.0 to 2.0.0` (major)
…

Ver todo o marketplace