should-i-upgrade — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited should-i-upgrade (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Pre-upgrade safety advisor. Two layers: a curated catalogue of known regressions from real field reports (user-driven), and a runtime fingerprint comparator for hosted-LLM silent regressions (provider-side).
$ARGUMENTS for <package> and optional <target-version>. Examples:postgres@16anthropic 4.7openclaw-claude-code 2026.5.2apt upgrade (asks about whole-system upgrade)mcp__openclaw-upgrade-orchestrator__check_known_regressions with the package + target versionmcp__openclaw-upgrade-orchestrator__detect_provider_regression (only relevant for LLM-provider upgrades; skip for OS packages)### 🔄 Upgrade advisor — `<package>` <current-version> → <target-version>For each known regression, render as a callout:
> ⚠️ **<regression title>** (severity: HIGH/CRITICAL)
> **Affected:** <version range or specific version>
> **What changes:** <one-line description of the actual regression — e.g. "logical replication slot WAL format changed; slots created on 15 fail under 16">
> **Mitigation:** <specific steps — drop+recreate, pin, config flag, etc.>
> **Source:** <field-report URL or operator-thread reference if available>If the package is an LLM provider / SDK, render:
**Provider-side fingerprint:**
- Last fingerprint sample: `<datetime>`
- Quality dim 1 (latency_p95): `<current>` vs baseline `<baseline>` (Δ <pct>%)
- Quality dim 2 (response_length_median): `<current>` vs baseline `<baseline>` (Δ <pct>%)
- Quality dim 3 (reasoning_effort_observed): `<current>` vs baseline `<baseline>`
- Verdict: 🟢 No silent drift / 🟡 Watch / 🔴 Likely regressedIf Watch or Worse, suggest: "Hold the upgrade. Run mcp__openclaw-upgrade-orchestrator__detect_provider_regression weekly for 2-3 weeks; if drift normalizes, proceed."
A numbered list of concrete steps. Tailor to the specific package — don't render a generic "test in staging first" boilerplate. Examples of good steps:
For postgres 15→16:
events_streaming replication slot (per regression catalogue).brew upgrade postgresql@16 (or your equivalent)./aufgaard:health-check.For Anthropic SDK 0.45 → 0.46:
pip install --upgrade anthropic==0.46.0cost-tracker.predict_429_in_window for 24h to catch any unexpected billing-route changes.A one-line confidence statement: "Confidence: HIGH (catalogue match for exact version pair). Coverage gap: WebSocket-side connection pooling not in catalogue — not predicted."
---
The [Production-AI MCP Suite Bundle](https://temurah.gumroad.com/l/production-ai-mcp-suite) ($29) includes the 8-page Field Reference PDF — covers post-upgrade-regression-cascade (P4.3), HERMES.md silent billing-routing (P3.4), and the Anthropic April-23 reasoning-effort downgrade case study.apt upgrade whole system), check each major package separately if possible. If too broad to enumerate, recommend: "Run /aufgaard:should-i-upgrade <specific-package> for the packages you actually depend on."$ARGUMENTS is empty: "Pass a package and optional target version: /aufgaard:should-i-upgrade postgres@16"pip install openclaw-upgrade-orchestrator-mcp and the plugin is loaded."detect_provider_regression returns "no fingerprint data yet": "Provider-side fingerprinting requires baseline samples. Run weekly fingerprint collection for ~2 weeks before regression detection becomes meaningful."~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.