update-skills-cade6e — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited update-skills-cade6e (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Update globally installed skills and/or project-level skills in one step.
| User says | Mode |
|---|---|
| "更新 skills" / "update skills" (no qualifier) | Global + Project (default) |
| "更新全局" / "global only" / "只更新全局" | Global only |
| "更新项目" / "project only" / "只更新项目" | Project only |
npx skills updateFirst check if skills-lock.json exists in the current directory:
# Check
ls skills-lock.json 2>/dev/null && echo "found" || echo "not found"
# If found, run:
npx skills experimental_installIf skills-lock.json is not found, skip and inform the user:
"No skills-lock.json found in current directory — skipping project update."
Run all applicable steps regardless of individual failures. Report results at the end:
✅ Global skills updated
(or: All global skills are up to date)
✅ Project skills updated (via skills-lock.json)
❌ Project update failed: <error message>
Suggestion: run `npx skills experimental_install` manuallynpx skills update compares a hash of installed files against the remote source. If they match, it reports "up to date" even after a remote push — use npx skills add <source> --skill <name> -y to force-reinstall.experimental_install is an experimental command; the name may change in future CLI versions.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.