update-target-projects
Syncs toolkit-using projects with the latest skills, ensuring all projects are up-to-date and properly configured.
Install this skill
Security score
The update-target-projects skill was audited on Mar 8, 2026 and we found 14 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 303 | ```bash |
Access to hidden dotfiles in home directory
| 25 | 2. `~/.codex/skills` (default) |
Access to hidden dotfiles in home directory
| 33 | **Global skills location:** `~/.claude/skills/` (symlinks for Conductor autocomplete) |
Access to hidden dotfiles in home directory
| 92 | 1. Scan `~/.claude/skills/` for existing entries |
Access to hidden dotfiles in home directory
| 212 | Location: ~/.claude/skills |
Access to hidden dotfiles in home directory
| 217 | Location: ~/.codex/skills |
Access to hidden dotfiles in home directory
| 236 | - `global` — Skills resolve via `~/.claude/skills/` symlinks |
Access to hidden dotfiles in home directory
| 327 | After migration: Skills resolve via ~/.claude/skills/ |
Access to hidden dotfiles in home directory
| 330 | Collaborators without ~/.claude/skills/ will lose access. |
Access to hidden dotfiles in home directory
| 357 | Skills now resolve via: ~/.claude/skills/ |
Access to hidden dotfiles in home directory
| 368 | Will copy: 30 skills from ~/.claude/skills/ |
Access to hidden dotfiles in home directory
| 459 | These projects now use ~/.claude/skills/ symlinks. |
Access to hidden dotfiles in home directory
| 462 | Note: Collaborators need ~/.claude/skills/ symlinks to access skills. |
Access to hidden dotfiles in home directory
| 492 | **REMINDER**: For projects using **local resolution**, always copy skills to target projects, not just update toolkit-version.json. The version file tracks state, but skills must actually be copied fo |
Install this skill with one command
/learn @benjaminshoemaker/update-target-projects