updating-lockstep

updating-lockstep is a Dependency & version upgrades skill for AI agents, published by SocketDev in the socket-cli repository on GitHub. Skillspace rates updating-lockstep C (70/100) and it passed the safety scan; the rating is based on static analysis only.

Acts on `lockstep.json` drift for repos that carry the lockstep manifest. Reads `pnpm run lockstep --json`, then runs a Workflow that pipelines each mechanical `version-pin` row through resolve → bump → validate → commit independently. Surfaces `file-fork` / `feature-parity` / `spec-conformance` / `lang-parity` rows as advisory. Invoked by the `updating` umbrella skill; can also run standalone.

Grade
C
Quality
70 / 100
Safety
Passed
GitHub stars
297

Unproven: rated by static analysis only, not yet compared head-to-head.

Not launch-quality. It is graded C with a clean safety verdict, but our quality filters exclude it: a model that read it found it written only for the repository it lives in. So it is not in our launch-quality set, the skills our MCP server searches and recommends. How launch-quality is decided

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

View source on GitHubSocketDev/socket-cli

Our review

Architecture
99 / 100
Maturity
Structured: ships references or scripts
Security scan
Low-risk patterns
License
Not declared. Check the repository before reusing it.
Adoption
Adopted by 4 other repositories, in 0 collections
Scope
Repo-internal: written for the repository it lives in. Acts on their lockstep.json manifest and umbrella skill convention

What the scanner flagged

  • over-broad allowed-tools ('*')

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Dependency & version upgrades

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.