Cran Extrachecks

🌐Community
by posit-dev · vlatest · Repository

Cran Extrachecks analyzes your Node.js project's `package.json` to identify potential dependency vulnerabilities and outdated versions, boosting security & stability.

Install on your platform

We auto-selected Claude Code based on this skill’s supported platforms.

1

Run in terminal (recommended)

terminal
claude mcp add cran-extrachecks npx -- -y @trustedskills/cran-extrachecks
2

Or manually add to ~/.claude/settings.json

~/.claude/settings.json
{
  "mcpServers": {
    "cran-extrachecks": {
      "command": "npx",
      "args": [
        "-y",
        "@trustedskills/cran-extrachecks"
      ]
    }
  }
}

Requires Claude Code (claude CLI). Run claude --version to verify your install.

About This Skill

The cran-extrachecks skill enables AI agents to perform additional checks on CRAN (Comprehensive R Archive Network) packages beyond standard metadata validation. It helps ensure package integrity, security, and compliance with specific community standards before installation or usage in production environments.

When to use it

  • Before deploying a new R package in a regulated environment where strict security policies apply.
  • When auditing third-party R libraries for known vulnerabilities or deprecated dependencies.
  • During CI/CD pipelines to automatically flag packages failing custom quality gates.
  • When verifying that a package adheres to specific community guidelines not covered by default checks.

Key capabilities

  • Performs extended validation beyond standard CRAN metadata.
  • Checks for potential security issues and deprecated components.
  • Validates compliance with additional community-defined standards.
  • Provides detailed reports on package health and reliability.

Example prompts

  • "Run extra checks on the 'dplyr' package before installing it in our production R environment."
  • "Audit this CRAN package for known vulnerabilities and deprecated functions using cran-extrachecks."
  • "Validate that the 'ggplot2' package meets our custom security and quality standards."

Tips & gotchas

Ensure your AI agent has network access to fetch the latest CRAN package metadata before running checks. This skill is designed for R packages only; attempting to use it with non-R libraries will result in errors or incomplete validation.

Tags

🛡️

TrustedSkills Verification

Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.

Security Audits

Gen Agent Trust HubPass
SocketPass
SnykPass

Details

Version
vlatest
License
Author
posit-dev
Installs
33

🌐 Community

Passed automated security scans.