Cran Extrachecks
Cran Extrachecks analyzes your Node.js project's `package.json` to identify potential dependency vulnerabilities and outdated versions, boosting security & stability.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add cran-extrachecks npx -- -y @trustedskills/cran-extrachecks
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"cran-extrachecks": {
"command": "npx",
"args": [
"-y",
"@trustedskills/cran-extrachecks"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
The cran-extrachecks skill enables AI agents to perform additional checks on CRAN (Comprehensive R Archive Network) packages beyond standard metadata validation. It helps ensure package integrity, security, and compliance with specific community standards before installation or usage in production environments.
When to use it
- Before deploying a new R package in a regulated environment where strict security policies apply.
- When auditing third-party R libraries for known vulnerabilities or deprecated dependencies.
- During CI/CD pipelines to automatically flag packages failing custom quality gates.
- When verifying that a package adheres to specific community guidelines not covered by default checks.
Key capabilities
- Performs extended validation beyond standard CRAN metadata.
- Checks for potential security issues and deprecated components.
- Validates compliance with additional community-defined standards.
- Provides detailed reports on package health and reliability.
Example prompts
- "Run extra checks on the 'dplyr' package before installing it in our production R environment."
- "Audit this CRAN package for known vulnerabilities and deprecated functions using cran-extrachecks."
- "Validate that the 'ggplot2' package meets our custom security and quality standards."
Tips & gotchas
Ensure your AI agent has network access to fetch the latest CRAN package metadata before running checks. This skill is designed for R packages only; attempting to use it with non-R libraries will result in errors or incomplete validation.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.