Bob Devkit: Upgrade, Impact, and PR Skills

Developers waste hours on three high-risk tasks before every major change: checking whether a framework upgrade breaks the project, tracing what a code change affects, and reviewing a plan before any file is touched. Each of these tasks is done by hand today. A missed package breaks a deploy. A missed caller ships blind. A bad plan reaches production before anyone can stop it. Bob Devkit solves all three with one install. The toolkit ships three skills: bob-upgrade-check, bob-impact, and bob-pr. bob-upgrade-check reads composer.json and composer.lock and runs three parallel analysis lanes — one for packages, one for PHP source code, and one for configuration files. It compares each finding against a committed rule table of breaking changes and prints one ranked HIGH/MED/LOW report. A Laravel 11-to-12 upgrade on an 18-file sample app completes in 13 milliseconds. No API key is required for the local scan. bob-impact reads the git diff, extracts every class, interface, and trait name from the changed files, and traces them to direct callers, database tables, and test references across the whole project. It prints one blast-radius report before the merge, not after the deploy breaks. bob-pr turns any plan into a reviewable GitHub-style pull-request page served on localhost. The agent edits shadow copies of the planned files, computes real unified diffs, and waits for the developer to click Approve or Request Changes. No real file is touched until the developer approves. Target users are PHP and Laravel developers who want a safety gate at every critical step. They run one command, read one report, and decide. The agent does the scanning. The developer makes the call. What makes this unique is the combination of speed, honesty, and agent-agnosticism. Each skill runs locally without a model. Each finding traces to a committed source file — no invented results. And because skills are plain markdown files that any agent reads, the same three commands work in IBM Bob, Cursor, Claude Code, Devin, and Windsurf after one install.