skill-update-check

Compare locked SHAs to upstream branches and assign risk flags.

Updated Jun 3, 2026

Search Tags:#automation #security #audit #drift #upstream #github-api #skills.lock

Ready to run

npx skills add https://github.com/swarm-ai-research/aeon --skill skill-update-check-swarm-ai-research

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-update-check
Source: https://github.com/swarm-ai-research/aeon/tree/main/skills/skill-update-check
Command: npx skills add https://github.com/swarm-ai-research/aeon --skill skill-update-check-swarm-ai-research

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits imported skills for upstream changes and security regressions since the version pinned in skills.lock.

Core Features & Use Cases

Lock-aware drift detection: compares each tracked skill's locked SHA against the latest upstream on the configured branch.
Risk triage & prioritization: classifies changes by drift size and security verdict, factoring in whether the skill is enabled in aeon.yml.
Actionable reporting: produces a comprehensive markdown report at articles/skill-update-check-${today}.md and a compact status footer for automation.

Quick Start

Run the skill-update-check to audit all tracked skills for upstream changes and security regressions.

Frequently Asked Questions about skill-update-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit imported GitHub skills for upstream drift and security regressions?▼

To audit imported skills for drift and security, compare the locked SHAs in your skills.lock file against the latest upstream commits on the tracked branch to identify changes and assign risk flags for prioritized triage.

What is skills.lock drift detection and how does it work?▼

Skills.lock drift detection works by iteratively comparing each tracked skill's pinned SHA hash against the latest upstream commit on its configured branch, detecting unauthorized or outdated changes since the version was locked.

How do I check if upstream skill updates are enabled in my configuration?▼

Checking upstream skill updates respects the enabled set configured in your aeon.yml file, ensuring the audit only processes active skills and factors their enabled status into the final risk triage prioritization.

Can I generate an automated security and drift report for my tracked skills?▼

Yes, you can generate an automated report that outputs a comprehensive markdown file at articles/skill-update-check-${today}.md alongside a compact status footer designed specifically for monitoring and automation pipelines.

What is the best way to triage security risks for outdated pinned skill versions?▼

The best way to triage security risks for outdated skill versions is to classify changes by drift size and security verdict, prioritizing updates based on whether the skill is enabled in your aeon.yml configuration.

Does the skill audit process require any external dependencies?▼

No, the skill audit process requires no external dependencies to function, relying solely on the GitHub API to fetch upstream branch data and comparing it against your local skills.lock file.