dependency-analyzer SKILL.md skillA
dependency-analyzer from chainlesschain/chainlesschain is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add chainlesschain/chainlesschain/dependency-analyzer@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- chainlesschain/chainlesschain
- Path
desktop-app-vue/src/main/ai-engine/cowork/skills/builtin/dependency-analyzer/SKILL.md- Versions recorded
- 4
- Latest version
- v1.0.0, committed Aug 28, 2026
- First version recorded
- Jun 3, 2026
- Size
- 3,899 bytes
- Repository stars
- 11
- License
- a license file GitHub does not identify
依赖分析技能 - 导入图构建、变更影响分析、CVE可达性、循环依赖检测.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 依赖分析技能 ## 描述 构建代码库的模块导入图和包依赖树。提供变更影响分析、循环依赖检测、CVE 可达性分析和许可证兼容性检查。 ## 使用方法 ``` /dependency-analyzer [目标] [选项] ``` ## 分析类型 ### 导入图构建 ``` /dependency-analyzer src/main/ --graph ``` 解析所有 `import`/`require` 语句，构建模块依赖图: - 直接依赖和传递依赖 - 导出/导入的具体符号 - Mermaid 图表输出 ### 变更影响分析 ``` /dependency-analyzer src/main/llm/session-manager.js --impact ``` 给定一个文件修改，追踪所有受影响的下游消费者: - 直接导入者 - 传递依赖者 - 受影响的 IPC 处理器 - 受影响的测试文件 ### 循环依赖检测 ``` /dependency-analyzer --circular src/main/ ``` 使用拓扑排序检测循环依赖: - 列出所有循环路径 - 建议解耦方案 - 影响严重度评估 ### CVE 可达性分析 ``` /dependency-analyzer package-lock.json --vulnerabilities ``` 不仅列出 CVE，还追踪漏洞是否可达: - 运行 `npm audit` 获取 CVE 列表 - 追踪漏洞函数是否被应用代码调用 - 标记"可达"（需修复）vs "不可达"（低优先级） - 修复建议（版本升级、替代包） ### 许可证检查 ``` /dependency-analyzer --licenses ``` 扫描所有依赖的许可证: - 许可证类型汇总 (MIT, Apache, GPL, BSD 等) - 兼容性矩阵 - GPL 传染风险警告 ## 输出格式 ### 影响分析报告 ``` Impact Analysis: session-manager.js ==================================== Direct dependents: 6 files → conversation-ipc.js (imports: SessionManager) → manus-optimizations.js (imports: SessionManager) → context-engineering.js (imports: SessionManager) ... Transitive dependents: 8 additional files Affected IPC handlers: 12 …
Read the whole file at its exact version.
How to install
mdr add chainlesschain/chainlesschain/dependency-analyzer@sha256:fe69041117181838The line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_kitknlinwzyz6psh)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Jun 3, 2026 and Aug 28, 2026, about one every 29 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.0.0 latest | 2026-08-28 | 44248c7 | 3,899 B | A | view · diff |
| v1.0.0 | 2026-08-28 | 31d5cfc | 3,882 B | A | view · diff |
| v1.0.0 | 2026-08-28 | c29953e | 3,879 B | A | view · diff |
| v1.0.0 | 2026-06-03 | 3b0b2dc | 3,770 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3899 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
chainlesschain/chainlesschain · 11 stars · license a license file GitHub does not identify · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_kitknlinwzyz6psh GET https://markdownregistry.com/api/v1/resolve?ref=chainlesschain/chainlesschain/dependency-analyzer GET https://markdownregistry.com/api/v1/blob/fe69041117181838bb4a185b69005c92bb4d83e821063e4b189a10a4a729ea80
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.