nemoclaw-contributor-update-dependencies
nemoclaw-contributor-update-dependencies is a Dependency & version upgrades skill for AI agents, published by NVIDIA in the NemoClaw repository on GitHub. Skillspace rates nemoclaw-contributor-update-dependencies C (73/100) and it passed the safety scan; a judge model has also reviewed it.
Audit and implement dependency upgrades as semantic migrations rather than version-only bumps. Use when changing a library, CLI, service, container image, runtime, installer artifact, or transitive dependency pin; especially when the upgrade crosses multiple releases or tags, changes security or lifecycle behavior, or requires changelog, source-code, upstream-test, downstream-callsite, compatibility, and provenance analysis. Trigger keywords - update dependency, upgrade dependency, bump version, dependency migration, update OpenShell, update OpenClaw, update Hermes, changelog audit, release-by-release audit.
- Grade
- C
- Quality
- 73 / 100
- Safety
- Passed
- GitHub stars
- 21,796
Placed #1 of 6 in the judged category final for Dependency & version upgrades.
Not launch-quality. It is graded C with a clean safety verdict, but our quality filters exclude it: a model that read it found it written only for the repository it lives in. So it is not in our launch-quality set, the skills our MCP server searches and recommends. How launch-quality is decided
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 94 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- Low-risk patterns
- License
- Apache-2.0
- Adoption
- Adopted by 0 other repositories, in 1 collections
- Scope
- Repo-internal: written for the repository it lives in. Dependency migrations specifically where NemoClaw consumes upstream contracts
Judge review
Placed #1 of 6 in the judged category final for Dependency & version upgrades.
- Trigger
90 90 - Instructions
90 90 - Specificity
88 88 - Safety
97 97 - Disclosure
68 68 - Maintenance
88 88
Exceptional supply-chain-aware safety practice (untrusted-evidence handling, verified collector execution) wrapped around a thorough migration checklist, if dense enough to read as a wall of text.
What the scanner flagged
- mentions secrets in text
Not checked yet
- No blind task eval yet
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.