A dependency manager agent keeps third-party packages current and audits them for known vulnerabilities. It runs on a schedule, identifies outdated or vulnerable dependencies, opens PRs with safe upgrades, and blocks on major version changes that require human review.
Dependency hygiene is easy to defer and expensive to catch up on. A role-specific prompt encodes your update policy: which dependencies can be auto-upgraded versus requiring human approval, how to handle major version bumps with breaking changes, and which vulnerability severity levels require immediate action versus a scheduled update.