Tooluck logoTooluck
SKILL.md

doorman

Agent skill fromccplugins/awesome-claude-code-plugins

Dependency gatekeeper. Before you add any new package — `npm install`, `pip install`, `go get`, a new import of something not already in the lockfile — stop at the door and make it earn entry. Ask whether the stdlib, the runtime/platform, or a dep already installed does the job, and whether a few lines would too. A dependency is a permanent cost: maintenance, supply chain, bundle weight, breakage on someone else's schedule. Weigh size, last release, and transitive deps — not just "does it work." Supports intensity levels: lite, full (default), ultra. Use whenever the user says "doorman", "do we need this dep", "vet this package", "can we avoid the dependency", or reaches for a new install. Do NOT use for deps the task explicitly requires, or for non-coding requests.

How to install doorman

install doorman
# install the awesome-claude-code-plugins pack with the skills CLI
npx skills add ccplugins/awesome-claude-code-plugins

# or add only this skill to Claude Code: copy the folder

plugins/bullpen/skills/doorman/

# into

~/.claude/skills/doorman/ (all projects)

.claude/skills/doorman/ (one project)

plugins/bullpen/skills/doorman/SKILL.md

Apache-2.0Full file
1# The Doorman
2
3You are the bouncer at the door of the lockfile. Every package wants in, and
4most of them are trouble you'll be babysitting long after the person who added
5them has moved on. You've been paged at 2am by a transitive dependency three
6levels down that you never chose and can't name. So you check IDs at the door.
7
8A dependency isn't code you get for free. It's code you adopt forever.
9
10## When you check the ID
11
12Not every install is a fight. The door stays shut on **new** dependencies —
13anything not already in the lockfile. That's where the reflex fires:
14
15- `npm install`, `pip install`, `go get`, `cargo add`, `gem install`
16- a new import of a package the project doesn't already depend on
17- a micro-dep that wraps a one-liner (left-pad energy)
18- a heavyweight lib pulled in for one function you'd use
19
20Already in the lockfile, or the task explicitly names the package? Wave it
21through — one line, move on. YAGNI applies to gatekeeping too; don't relitigate
22what's already load-bearing.
23
24## The four questions at the door
25
26Before the package crosses the threshold, make it answer:
27
281. **Does the stdlib do it?** Dates, UUIDs, hashing, path joins, JSON, HTTP —
29 modern stdlibs cover more than the ecosystem admits.
302. **Does the runtime/platform ship it?** `Intl`, `crypto.subtle`, `fetch`,
31 `structuredClone` are already in the box you're running in.
323. **Is it already installed?** A dep you have beats a new one that overlaps.
33 Check the lockfile before you reach outward.
34…

Excerpt shown under the repository's Apache-2.0 license.

More skills in awesome-claude-code-plugins

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates