Agent Skills: Dependency Analyzer

Analyze and optimize project dependencies. Use when auditing npm packages, checking for vulnerabilities, finding outdated dependencies, analyzing bundle size, or detecting circular imports.

UncategorizedID: j0KZ/mcp-agents/dependency-analyzer

Install this agent skill to your local

pnpm dlx add-skill https://github.com/j0KZ/mcp-agents/tree/HEAD/starter-kit/template/.claude/skills/dependency-analyzer

Skill Files

Browse the full folder contents for dependency-analyzer.

Download Skill

Loading file tree…

starter-kit/template/.claude/skills/dependency-analyzer/SKILL.md

Skill Metadata

Name
dependency-analyzer
Description
"Analyze and optimize project dependencies. Use when auditing npm packages, checking for vulnerabilities, finding outdated dependencies, analyzing bundle size, or detecting circular imports."

Dependency Analyzer

Comprehensive dependency analysis and optimization for JavaScript/TypeScript projects

Quick Commands

# Analyze all dependencies
npm run analyze:deps

# Find outdated packages
npm outdated --long

# Check for vulnerabilities
npm audit --audit-level=moderate

# Analyze bundle size impact
npx bundle-phobia-cli package-name

Core Functionality

Key Features

  1. Dependency Audit: Security vulnerabilities and outdated packages
  2. Bundle Analysis: Size impact and tree-shaking effectiveness
  3. Circular Detection: Find and resolve circular dependencies
  4. License Compliance: Verify license compatibility
  5. Update Strategy: Safe update recommendations

Detailed Information

For comprehensive details, see:

cat .claude/skills/dependency-analyzer/references/audit-guide.md
cat .claude/skills/dependency-analyzer/references/optimization-strategies.md
cat .claude/skills/dependency-analyzer/references/security-best-practices.md

Usage Examples

Example 1: Full Dependency Audit

import { DependencyAnalyzer } from '@j0kz/dependency-analyzer';

const analyzer = new DependencyAnalyzer();
const report = await analyzer.audit({
  checkVulnerabilities: true,
  checkOutdated: true,
  checkLicenses: true,
  checkBundleSize: true
});

console.log(report.summary);

Example 2: Find Circular Dependencies

const circles = await analyzer.findCircularDependencies();
if (circles.length > 0) {
  console.log('Circular dependencies found:', circles);
}

Configuration

{
  "dependency-analyzer": {
    "autoFix": false,
    "severity": "moderate",
    "ignoreDev": false,
    "maxBundleSize": "500kb",
    "allowedLicenses": ["MIT", "Apache-2.0", "BSD-3-Clause"]
  }
}

Integration with CI/CD

# GitHub Actions example
- name: Dependency Audit
  run: |
    npm audit --audit-level=moderate
    npx @j0kz/dependency-analyzer audit --fail-on-high

Notes

  • Integrates with npm, yarn, and pnpm
  • Caches results for faster subsequent runs
  • Supports monorepo structures
  • Can generate SBOM (Software Bill of Materials)
Dependency Analyzer Skill | Agent Skills