Dependabot PR Review

Triage, classify, and merge open Dependabot PRs with risk-based assessment.

Auto-Invoke Triggers

This skill activates when:

1. Keywords: "dependabot", "dependabot PRs", "dependency updates", "merge dependabot", "review dependabot", "dependency PRs", "bump PRs", "update dependencies"
2. Command: /dependabot-review

Arguments

• (no args) — Triage mode: list all open Dependabot PRs with risk classification
• --merge-safe — Merge all PRs classified as SAFE TO MERGE (asks for target branch first)
• --pr <number> — Deep-dive analysis of a single Dependabot PR
• --base <branch> — Target branch for retargeting PRs before merge (skips the prompt)