A Claude Code plugin providing dependency and repository management skills powered by git-pkgs, brief, forge, pin, and capcheck.
Add the marketplace and install the plugin:
/plugin marketplace add git-pkgs/claude-plugin
/plugin install git-pkgs@git-pkgs
Requires the underlying tools to be installed:
brew tap git-pkgs/git-pkgs brew install git-pkgs brief forge pin capcheck
or via go install github.com/git-pkgs/<tool>/cmd/<tool>@latest.
| Skill | Description |
|---|---|
brief |
Detect project toolchain, languages, package managers, test runners, linters |
init |
Initialize, reindex, or manage the git-pkgs database |
list |
List, search, and locate dependencies |
diff |
Compare dependencies between commits, branches, or working tree |
history |
Track dependency change history, blame, bisect |
audit |
Scan for known vulnerabilities via OSV |
outdated |
Find outdated or stale dependencies |
licenses |
License compliance checking |
sbom |
Generate CycloneDX or SPDX SBOMs |
manage |
Add, remove, update, install, or vendor dependencies |
evaluate |
Assess a package's trustworthiness before adding it |
forge |
Work with GitHub, GitLab, Gitea, Forgejo, Bitbucket, Gerrit, and Tangled repos through one CLI |
pin |
Vendor browser assets from npm without npm, node_modules, or install scripts |
capcheck |
Fail Go builds when code or a dependency gains a new privileged capability |
Most skills are triggered automatically by Claude when relevant. manage is manual-only since it modifies dependencies.
Invoke skills directly:
/git-pkgs:brief
/git-pkgs:audit
/git-pkgs:evaluate lodash
Or just ask Claude naturally and it will use the right skill:
What dependencies does this project have?
Are there any known vulnerabilities?
Is the left-pad package safe to use?
MIT.