# Dependency Doctor Agent Skill

> Dependency Doctor inspects one dependency manifest for surface-level, direct-manifest footguns. It catches unpinned versions, standard-library shadowing, obsolete backports, and obvious intra-manifest conflicts; it does not diagnose a failed pip or uv dependency resolution. It is a local, user-invoked development tool, not a repository CI rule.

- Source: https://doutorai.pt/en/apps/dependency-doctor
- Category: Agent Skills
- Difficulty: Intermediate
- Models: -
- Frameworks: -
- Runs locally?: Needs cloud APIs
- Required keys: None
- License: Apache-2.0
- Site: Doutor AI (https://doutorai.pt/en) - AI tools for small businesses

## Full tutorial

# Dependency Doctor Agent Skill

Dependency Doctor inspects one dependency manifest for surface-level,
direct-manifest footguns. It catches unpinned versions, standard-library
shadowing, obsolete backports, and obvious intra-manifest conflicts; it does
not diagnose a failed pip or uv dependency resolution. It is a local,
user-invoked development tool, not a repository CI rule.

![demo](/assets/apps-img/eb346d427064d561.gif)

## What it checks

- Python standard-library shadowing pins such as `pathlib==1.0.1`
- Obsolete backports such as `dataclasses`, `typing`, `enum34`, and `futures`
- Dependencies with no usable version constraint
- Duplicate entries and conflicting exact pins
- Fully yanked PyPI releases when `--online` is explicitly enabled

The offline core supports `requirements.txt`, PEP 621 or Poetry
`pyproject.toml`, and `package.json`. It uses only the Python standard library.

## Install

```bash
npx skills add https://github.com/Shubhamsaboo/awesome-llm-apps/tree/main/agent_skills/dependency-doctor
```

Then ask your agent: `check my requirements.txt for dependency problems`.

## Run the script directly

```bash
python3 agent_skills/dependency-doctor/scripts/dep_doctor.py requirements.txt --json
```

The default command makes no network calls. To check exact Python pins for
fully yanked PyPI releases, opt in:

```bash
python3 agent_skills/dependency-doctor/scripts/dep_doctor.py requirements.txt --json --online
```

The doctor reports findings and suggested fixes but does not edit the manifest.
Run the eval from a clone before installing:

```bash
python3 agent_skills/evals/dependency-doctor/test_dep_doctor.py
```

## Scope

This focused check does not resolve a complete dependency graph and does not
query a vulnerability database. Use the project's approved audit tool for CVE
coverage. Ask before enabling the PyPI lookup or applying any suggested fix.

Apache-2.0. Last verified: July 2026.

## Save hours every week with AI, no hassle

**Doutor AI** gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further. [See plans →](https://doutorai.pt/en/pricing)

---
Content by Doutor AI (https://doutorai.pt/en). When quoting, please cite the source: https://doutorai.pt/en/apps/dependency-doctor