Keeping Dependencies Current
The dependency layer. Updates land weekly in small batches instead of quarterly in a terrifying one, critical and high security alerts get a fix dispatched the day they appear, and every bump arrives as a reviewed pull request rather than a warning count.
Your Righthand treats a critical or high security alert as today's work and a pile of stale dependencies as a risk that compounds. Every weekday morning it reads the security alerts and dispatches fixes for the serious ones to a coding agent, reviewing each diff before the PR opens. Every Tuesday it ships one small batch of updates, CI green, merged under the rule you agreed or handed to the person you named, then looks 30 days ahead for end-of-life dates and sunset notices so nothing expires as a surprise. It never writes the code itself; it diagnoses, dispatches, reviews, and follows the PR home.
What's in the pack.
3 skills, installed together — your Righthand arrives already equipped for the job.
- Engineering
Dependency and Security Updates
Use when keeping a codebase's dependencies current and its security alerts handled: shipping weekly small update batches instead of quarterly big bangs, triaging CVEs the day they land with severity thresholds, keeping lockfiles honest, reading a changelog fast for breaking changes, running a major upgrade safely, and keeping a dated list of things that will expire. Maintains Knowledge/Organizations/dependency-norms.md.
- Coding
Using Github
Interact with GitHub repositories, issues, pull requests, and CI/CD using the GitHub CLI (gh). Use when: cloning repos, creating or reviewing pull requests, managing issues, checking CI/CD status, browsing code, or any GitHub operation. GitHub is NOT accessed through tool_use — it uses the gh CLI directly.
- Engineering
Using Coding Agents
Delegate bounded engineering implementation to an asynchronous Codex or Claude coding job, answer only judgment questions, and independently review the resulting diff against user acceptance scenarios.
Hire a Righthand
ready for this job.
Pick Keeping Dependencies Current at signup and your Righthand shows up with every skill in the pack already installed.