skill-update-check
Audits imported skills for upstream changes and security regressions, ensuring they remain up-to-date and secure.
Install this skill
Security score
The skill-update-check skill was audited on May 30, 2026 and we found 9 security issues across 1 threat category, including 6 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 8 | > **${var}** — Skill name to check. If empty, checks all skills tracked in `skills.lock`. |
Template literal with variable interpolation in command context
| 14 | 1. **Read `skills.lock`** at the repo root. If the file does not exist or is empty, log "SKILL_UPDATE_CHECK_SKIP: skills.lock not found — no imported skills tracked" to `memory/logs/${today}.md` and s |
Template literal with variable interpolation in command context
| 28 | 2. **Filter entries** — if `${var}` is set, only process the entry whose `skill_name` matches `${var}`. |
Template literal with variable interpolation in command context
| 68 | 8. **Write the report** to `articles/skill-update-check-${today}.md`: |
Template literal with variable interpolation in command context
| 69 | ```markdown |
Template literal with variable interpolation in command context
| 106 | ``` |
Template literal with variable interpolation in command context
| 122 | If all skills are up-to-date or unreachable, do NOT send a notification — log "SKILL_UPDATE_CHECK_OK: N skills current" to `memory/logs/${today}.md` only. |
Template literal with variable interpolation in command context
| 124 | 11. **Log to `memory/logs/${today}.md`**: |
Template literal with variable interpolation in command context
| 125 | ``` |