Know which dependencies are drifting before one of them breaks.

Read declared dependencies and recent runtime errors, identify the ones that are stale or already failing, and prepare a prioritized upgrade list.

Who it isA maintainer who keeps an eye on the dependencies nobody has looked at in months.

Wakes upWeekly

Reads

Reports toSlack or a dedicated mailbox. You choose on the next screen.

Add Dependency risk review to your workspaceNothing runs until you add it.

Engineeringone of 24 ready-made agents in the library

Deliverable

A prioritized dependency list with staleness, observed failures, and suggested order of work.

Human sign-off required

A prioritized dependency list with staleness, observed failures, and suggested order of work. Prepared for review, never posted.

How this composition works.

Dependency upgrades get deferred until something breaks, at which point the change is large and the context is gone. This workflow compares the declared set against observed runtime failures so the list is ordered by evidence rather than by version number. It opens no pull request and upgrades nothing.

Read the declared set

Collect current dependency declarations and their versions.

Check observed failures

Match recent runtime errors against the dependencies implicated in them.

Prepare the list

Order by evidence and note which items already have an issue.

A human signs off

Upgrades, pull requests, and production changes require an engineer.

Deliverable

A prioritized dependency list with staleness, observed failures, and suggested order of work.

Human sign-off required

A prioritized dependency list with staleness, observed failures, and suggested order of work. Prepared for review, never posted.

Composed from the tools engineering already uses.

GitHub. Read and write GitHub repos, issues, and pull requests.

Sentry. Investigate errors, traces, releases, and project health in Sentry.

Linear. Browse and update Linear issues, projects, and cycles.

Optional skills add method and verification.

Data Validation. Validate an analysis before sharing by checking lineage, methodology, calculations, bias, visualizations, and whether conclusions follow. Use for SQL, spreadsheets, dashboards, or reports. See the playbook →

Put your engineering workflow under policy. Tell us what your team repeats today.

Add Dependency risk review to your workspace

More for engineering.

When a qualifying alert fires

Incident triage

Trace a production error, identify the likely change, and prepare a triage issue without giving the agent authority to modify production.

See the workflow

When a release is marked complete

Release notes

Collect shipped changes, translate implementation detail into customer outcomes, and route a complete release-note draft for approval.

See the workflow

When a release is marked complete

Deploy health check

After a release, compare error and delivery signals against the pre-release baseline and report whether anything moved beyond normal variance.

See the workflow