agent-skills

### Skill: Dependency Intelligence Agent

**Purpose**: Automatically analyze and document third-party dependencies in a project to identify security vulnerabilities, license compliance issues, and outdated packages. This skill integrates with GitHub Copilot to provide real-time suggestions during development.

**Implementation Steps**:
1. **Setup**: Clone the [open-reusables](https://github.com/docs/open-reusables) repository to access reusable components for dependency parsing. Install the `npm-check-updates` package globally to enable version tracking:
   ```bash
   npm install -g npm-check-updates
   ```

2. **Integration**: Use the `custom-agents-template` repository to scaffold a new agent. Modify the `agent.js` file to include a dependency analysis function:
   ```javascript
   const { execSync } = require('child_process');
   const fs = require('fs');

   async function analyzeDependencies(projectPath) {
     const packageJson = JSON.parse(fs.readFileSync(`${projectPath}/package.json`, 'utf8'));
     const outdated = JSON.parse(execSync(`ncu --json`, { cwd: projectPath }));
     const vulnerabilities = await fetchVulnerabilities(packageJson.dependencies);
     
     return {
       outdatedPackages: outdated,
       vulnerabilities,
       licenseIssues: checkLicenses(packageJson.dependencies)
     };
   }
   ```

3. **GitHub Copilot Integration**: Use the `version-identifier` repository to create a VS Code extension that highlights outdated dependencies in the editor. Add a command to trigger the analysis:
   ```json
   {
     "command": "dependency-analyzer.run",
     "title": "Run Dependency Analysis"
   }
   ```

4. **Output**: Generate a report in Markdown format for documentation:
   ```markdown
   ## Dependency Report for Project: `my-project`
   
   | Package | Current Version | Latest Version | Vulnerabilities |
   |---------|-----------------|----------------|------------------|
   | lodash  | 4.17.15         | 4.17.21        | CVE-2021-23337   |
   ```

**Best Practices**:
- Schedule weekly automated runs using GitHub Actions (inspired by [onboarding-actions](https://github.com/docs/onboarding-actions)).
- Store historical reports in a dedicated `reports/` directory for trend analysis.
- Use the `license-checker` npm package to ensure compliance with open-source licenses.

**Example Use Case**: A developer working on a Node.js project receives a Copilot suggestion to update the `express` package from version 4.17.1 to 4.18.2 due to a security patch. The agent also flags a license conflict with the `moment` package, suggesting an alternative library.

**Maintenance**: Regularly update the agent to support new dependency management tools (e.g., `pnpm`, `yarn`).