Skip to main content
skill CX Codex

adding-dependencies — Claude Code skill: dependency checks and setup

This skill helps decide whether a project needs a dependency and how to assess and update it. Use it before adding a package, SDK, or GitHub Action.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add riekelt/principal-engineer --skill adding-dependencies -a claude-code
Open on GitHub

What adding-dependencies does

The skill starts by checking whether existing code, the standard library, the platform, or an installed dependency can handle the task. If a new package is warranted, it calls for weighing its transitive tree, build and install weight, license, and security record. It also asks you to inspect the API surface you plan to use and document why the package belongs in the project, including when it should be removed.

For updates, the skill recommends pinned versions and committed lockfiles. Before a major bump, read the release notes, run tests, and keep the change in its own commit. Vendored code should carry its origin and version. Remove a dependency in the same change as the feature it served.

The principal-engineering skill is required background. If project rules do not define a dependency policy, the skill advises recording an assumption and assigning someone to track the policy decision. That distinction matters: adding a package still commits the project to a choice, even when its policy is unsettled.

What it helps with

  • decide whether a package is necessary
  • weigh a dependency's license and transitive tree
  • pin versions and test a major update
  • document why a dependency was added or removed

Example prompts for the agent

  • Check whether this task can be done without adding a dependency.
  • Assess this package before we add it and record the reasoning.
  • Update this dependency: review its release notes, pin the version, and run the tests.

How to install adding-dependencies

1Skills CLI (Vercel)

npx skills add riekelt/principal-engineer --skill adding-dependencies -a claude-code

2Manually: put the files in place

~/.claude/skills/adding-dependencies/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/adding-dependencies/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about adding-dependencies

How do I install adding-dependencies in Claude Code?

Run npx skills add riekelt/principal-engineer --skill adding-dependencies -a claude-code. The skill file is at ~/.claude/skills/adding-dependencies/SKILL.md.

What does adding-dependencies do?

It guides dependency decisions: whether to add a package, how to assess its risks, and how to handle updates or removal. It also covers documenting the reasons for the decision.

What does adding-dependencies require?

It requires the principal-engineering skill as background. That skill provides the context for its dependency guidance.

Similar skills

All skills for Security →

From the same set9

guarding-architecture Enforces system boundaries by turning structural invariants into breaking build tests. Useful when code crosses module limits or adds unwanted cross-package imports. CX Codex +1 18,000installs verifying-before-done An agent skill that forces a check on the changed code's real surface and a pasted verify output before any completion claim goes out. CX Codex +1 17,800installs principal-engineering Enforces core engineering discipline for AI agents: mandates pre-change checkpoints, bans silent error suppression, and requires evidence from real code. CX Codex +1 18,000installs writing-unit-tests Guides an agent through writing or revising unit tests around observable behavior. Useful for flaky tests, confusing cases, and new test coverage. CX Codex +1 17,800installs operating-safely Sets safety guards for destructive commands, secret handling, and parallel edits. It activates before dangerous operations like deleting data or restarting live processes. CX Codex +1 17,900installs scoping-changes Keeps a fix tied to the problem that triggered it and makes partial delivery explicit. Use it when a task starts growing or an approved plan needs to be split. CX Codex +1 17,700installs keeping-one-source-of-truth An agent skill that keeps each fact in exactly one place and stops copies from drifting apart. Useful the moment a value begs to be pasted elsewhere. CX Codex +1 17,700installs testing-changes Defines test requirements for code changes, enforcing regression tests for bug fixes, edge-case coverage, and strict checks against empty test diffs. CX Codex +1 17,900installs

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor