update-skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited update-skills (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Check for updates to locally installed skills by fetching the latest from kimgoetzke/coding-agent-configs on GitHub and comparing against the local skills directory.
https://github.com/kimgoetzke/coding-agent-configs.gitscripts/ directory| Tool | Default target directory |
|---|---|
| Claude Code | ~/.claude/skills |
| Copilot | ~/.copilot/skills |
| Pi | ~/.pi/agent/skills |
If you cannot determine which tool you are, ask the user.
Set the target directory based on the table above. Use the variable TARGET_DIR in subsequent steps.
Also resolve SKILL_DIR to the absolute path of this locally installed skill directory. Typical values:
~/.claude/skills/update-skills~/.copilot/skills/update-skills~/.pi/agent/skills/update-skillsRun the check script:
bash "$SKILL_DIR/scripts/check-updates.sh" "$TARGET_DIR"The script outputs one line per skill with a status prefix:
| Prefix | Meaning |
|---|---|
UP_TO_DATE:<name> | No changes |
CHANGED:<name> | Files differ — diff follows until END_DIFF line |
MISSING_LOCALLY:<name> | Exists in repo but missing locally |
ALL_UP_TO_DATE | No updates available at all |
Skills that exist locally but not in the remote repo are ignored.
ALL_UP_TO_DATE: tell the user all skills are up to date and stopCHANGED or MISSING_LOCALLY skill:For each skill the user approves, run:
bash "$SKILL_DIR/scripts/apply-update.sh" "$TARGET_DIR" <skill-name>Report success or failure for each.
After processing all skills, print a summary:
Finally, ask the user if they wish to use the /update-agents skill to sync any agents from the remote repo.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.