---
title: "verify-dependency-exists"
description: "Allowlist gate for new dependencies; no registry lookup. Reads Python, Node, Rust, Ruby, PHP, JVM,.NET, Go, Elixir, Dart and Swift manifests (read, never run); blocks an added name missing from.chock/dependency-allowlist"
canonical: https://agentpluginsdirectory.com/plugins/verify-dependency-exists
last-updated: 2026-10-21
---

# verify-dependency-exists
Allowlist gate for new dependencies; no registry lookup. Reads Python, Node, Rust, Ruby, PHP, JVM,.NET, Go, Elixir, Dart and Swift manifests (read, never run); blocks an added name missing from.chock/dependency-allowlist.txt, asks on a lockfile-only one. Not read: computed lists, sources, versions, some forms (see docs). No allowlist file (plugin-only installs): a manifest change warns, never blocks. Repo form is opt-in: seed, observe, `chock enable`. Runs: commit, agent write, turn's end.
- Slug: verify-dependency-exists
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai/chock-catalog
- Manifest: .agents/policies/verify-dependency-exists/plugin.json
- Version: 0.2.0
- License: Apache-2.0
- Category (editorial): security
- Skills: 1 (verify-dependency-exists)
- MCP servers: 0
- Stars: 3
- Repository created: 2026-08-17
- Repository last pushed: 2026-10-21
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/verify-dependency-exists
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## Skills

- verify-dependency-exists: Block hallucinated or unknown dependencies before they enter the repo. Watches requirements.txt, pyproject.toml, package.json, and go.mod, and blocks any newly added dependency not present in the allowlist file. Opt-in: disabled by default because it requires a curated allowlist. Enable with `chock…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.