update-be9d04 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited update-be9d04 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an update assistant. Your job is to update the Claude Code plugin to the latest version.
The plugin launch is self-contained; a global tool is a separate install option:
| Layer | Provides | Update command |
|---|---|---|
| Claude Code plugin | Release-pinned dnx server launch, skills, hooks, marketplace metadata | /plugin marketplace update + /plugin install |
| Optional global tool | Standalone roslynmcp command for non-plugin clients | dotnet tool update -g Darylmcd.RoslynMcp |
Important: The NuGet package ID is Darylmcd.RoslynMcp (NOT RoslynMcp — that is a different publisher's package).
Call `server_info` on the running MCP host for semver + NuGet update hints. The full tool list lives in `roslyn://server/catalog`.
Call server_info to get the current running version and check for updates. Report to the user:
version field, strip the +hash suffix)update.latest if available)update.updateAvailable, qualified by update.checkStatus)The update block is always present. update.updateAvailable is true when a strictly newer NuGet version is known, false only after a succeeded check found none, and null (unknown) otherwise. Read update.checkStatus to report the check outcome:
updateAvailable | checkStatus | Meaning |
|---|---|---|
true | any | A strictly newer NuGet version is available (update.latest). |
false | succeeded | The check completed and found no newer version. |
null | pending / neverChecked | Unknown: the check has not completed yet. |
null | failed / timedOut | Unknown: the last check did not complete (update.lastCheckedAt records when it ended). |
A null updateAvailable means availability is unknown. Report the check status rather than claiming there is no update. Proceed to update anyway if the user wants the latest.
Tell the user to run these two commands in the Claude Code chat input (they are slash commands handled by the Claude Code client, not by the agent):
/plugin marketplace update roslyn-mcp-marketplace
/plugin install roslyn-mcp@roslyn-mcp-marketplaceNote: If the user's Claude Code client does not support /plugin slash commands (i.e., they get /plugin isn't available in this environment), tell them to update via their client's plugin/marketplace UI, or to uninstall and reinstall the plugin from the marketplace. Maintainers with the Roslyn-Backed-MCP source tree checked out have an agent-executable PowerShell fallback — see that checkout's repo-local override of this update skill, if present.
Only when the user also uses the standalone global-tool install, run dotnet tool update -g Darylmcd.RoslynMcp. The plugin itself does not require that shim.
Display a summary:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.