A zero-config AI tool that identifies unused dependencies and flags security vulnerabilities to optimize your package.json.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ai-deps
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ai-deps using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Deps Analyzer?
Deps Analyzer is a specialized utility designed for developers who want to maintain lean, efficient, and secure codebases. As a part of the Openclaw Skills collection, it addresses the common problem of dependency bloat by scanning source code to identify packages that are installed but never actually imported. By automating the audit process, it helps developers reduce bundle sizes and minimize the attack surface of their applications.
Unlike traditional scanners, this skill leverages AI to provide context for every problematic dependency it finds. Using Openclaw Skills like Deps Analyzer ensures that your project remains maintainable over time, as it explains the purpose of mystery dependencies and prioritizes critical security updates automatically.
Deps Analyzer Use Cases
- Identifying and removing unused npm packages to reduce production bundle size.
- Auditing legacy projects to understand the purpose of inherited dependencies.
- Preparing for major framework upgrades by cleaning the dependency tree first.
- Automating security audits by flagging outdated packages with known vulnerabilities.
How Deps Analyzer Works
- The skill triggers a scan using depcheck to find dependencies in package.json that aren't referenced in the code.
- It executes npm outdated to collect a list of packages requiring updates or security patches.
- Collected data is sent to GPT-4o-mini, which analyzes the impact and role of each dependency.
- The tool outputs a prioritized report or optionally auto-removes unused packages when the fix flag is active.
Deps Analyzer Setup
Deps Analyzer requires Node.js 18 or higher and an OpenAI API key. It can be run directly via npx without a permanent installation.
# Set your API key
export OPENAI_API_KEY='your_openai_key'
# Run the analyzer
npx ai-deps
To automatically fix issues by removing unused dependencies:
npx ai-deps --fix
Deps Analyzer Data Schema & Taxonomy
| Component | Description |
|---|---|
| Unused Deps | List of packages present in package.json but missing from imports. |
| Outdated Deps | Table comparing current, wanted, and latest versions of packages. |
| AI Insights | Descriptive analysis of why specific dependencies should be updated or removed. |
| Target Directory | The project path currently being analyzed (defaulting to current dir). |
Deps Analyzer Advanced Features
- Support for devDependencies auditing to ensure testing tools and build scripts remain relevant.
- Target directory specification using the --dir flag for monorepo support.
- Automated cleanup mode with the --fix flag for immediate project optimization.
- Context-aware analysis that differentiates between functional code and dynamic imports.
SKILL.md
Loading
Related Openclaw Skills
CSS to Tailwind
An AI-powered utility that converts legacy CSS files into optimized Tailwind CSS utility classes while preserving complex selectors and media queries.
CSP Generator (csp-gen)
A powerful tool to automatically scan your codebase and generate accurate Content Security Policy (CSP) headers to secure your web applications.
Cron Generator
A command-line utility that transforms natural language descriptions into valid cron expressions and human-readable explanations.
Coverage Boost
An AI-driven tool that analyzes code coverage gaps and generates targeted unit tests to improve software reliability.
Diff Summary
Transform complex git diffs into plain-English summaries for faster code reviews and automated pull request descriptions.
Dockerfile Generator
A smart CLI tool that scans your project to generate optimized, multi-stage Dockerfiles and configuration files automatically.
METADATA
Featured*
