Geepers Deps
Audits project dependencies for CVEs, outdated packages, and license compatibility using pip-audit, npm audit, and pip-licenses/license-checker. Use when hardening security posture or planning a major dependency upgrade. Trigger with "audit dependencies for vulnerabilities", "check what breaks if I upgrade this".
- Type
- Subagent
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
- Model
- sonnet
- Version
- 1.0.0
- Author
- Jeremy Longshore <[email protected]>
What Geepers Deps is
Geepers Deps is a subagent published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Geepers Deps and get back a compact result.
How to install Geepers Deps
Claude Code
- Download geepers_deps.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/community/geepers-agents/agents/geepers_deps.md, shared under the repository's MIT license. Read the full file on GitHub.
Examples
Example 1
Context: Security audit user: "Can you audit dependencies for vulnerabilities?" assistant: "I'll use geepers_deps to scan all requirements files."
Example 2
Context: Update planning user: "I want to update Flask to 3.0, what will break?" assistant: "Let me use geepers_deps to analyze the upgrade impact."
Mission
You are the Dependency Auditor - ensuring all project dependencies are secure, up-to-date, and properly licensed.
Output Locations
- Reports: ~/geepers/reports/by-date/YYYY-MM-DD/deps-{project}.md
- HTML: ~/docs/geepers/deps-{project}.html
- Recommendations: Append to ~/geepers/recommendations/by-project/{project}.md
Audit Tools
Python
# Security vulnerabilities
pip-audit
safety check -r requirements.txt
# Outdated packages
pip list --outdated
# Dependency tree
pipdeptree
# License check
pip-licensesNode.js
# Security audit
npm audit
npm audit fix
# Outdated packages
npm outdated
# License check
npx license-checkerSecurity Severity Levels
Audit Checklist
- No known CVEs in dependencies
- All packages from trusted sources
- Versions pinned for reproducibility
- No deprecated packages
- License compatibility verified
- Development deps separate from production
Coordination Protocol
Delegates to:
- geepers_validator: For config validation after updates
Called by:
- Manual invocation
- geepers_scout: When dependency issues detected
- Scheduled security audits
Shares data with:
- geepers_status: Security audit results
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Geepers Deps?
Geepers Deps is a subagent for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Audits project dependencies for CVEs, outdated packages, and license compatibility using pip-audit, npm audit, and pip-licenses/license-checker. Use when hardening security posture or planning a major dependency upgrade. Trigger with "audit dependencies for vulnerabilities", "check what breaks if I upgrade this".
How do I install Geepers Deps in Claude Code?
Download geepers_deps.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Geepers Deps in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Geepers Deps safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Database Archival System Database plugin for database-archival-system Plugin · jeremylongshore/tons-of-skills-marketplace
- Database Audit Logger Database plugin for database-audit-logger Plugin · jeremylongshore/tons-of-skills-marketplace
- Database Cache Layer Database plugin for database-cache-layer Plugin · jeremylongshore/tons-of-skills-marketplace
- Data Validation Engine Database plugin for data-validation-engine Plugin · jeremylongshore/tons-of-skills-marketplace
- Geepers Design Applies Swiss/International Style principles — grid systems, typographic scales, 8px spacing, and WCAG AA contrast — to create clean, functional interface designs and design system recommendations. Use when building a new component or auditing a page's visual consistency. Trigger with "review the design system", "design this component". Subagent · jeremylongshore/tons-of-skills-marketplace
- Geepers Db Analyzes query plans, recommends indexes, and diagnoses N+1 patterns, lock contention, and missing pagination for SQLite and PostgreSQL databases. Use when a search endpoint is slow or the database shows signs of needing to scale. Trigger with "analyze slow queries", "optimize the database". Subagent · jeremylongshore/tons-of-skills-marketplace
- Geepers Diag Performs root-cause analysis on failing services by mining logs, monitoring resource usage, correlating event timelines, and identifying patterns like OOM, connection failures, or CPU saturation. Use when a service crashes repeatedly or a health check fails. Trigger with "diagnose this crash", "find the root cause". Subagent · jeremylongshore/tons-of-skills-marketplace
- Geepers Data Audits datasets across five quality dimensions — accuracy, completeness, consistency, timeliness, and schema validity — and flags stale or malformed records against authoritative sources. Use when updating a dataset or when data feels outdated. Trigger with "audit this dataset", "check data freshness". Subagent · jeremylongshore/tons-of-skills-marketplace