update-package-skill SKILL.md skillA
update-package-skill from skilld-dev/skilld is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add skilld-dev/skilld/update-package-skill@git:20261010.a246e3aPins git:20261010.a246e3a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- skilld-dev/skilld
- Path
skills/update-package-skill/SKILL.md- Versions recorded
- 2
- Latest version
- git:20261010.a246e3a, committed Oct 10, 2026
- First version recorded
- Oct 7, 2026
- Size
- 4,478 bytes
- Repository stars
- 330
- License
- MIT
Updates an existing package Skill for a new release of its npm or local package by testing only what changed since the version the Skill names. Use when a maintainer asks to refresh a package Skill after a release, or when a SKILL.md names an older tested version than the package.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Update a package Skill Bring an existing package Skill to a new package version with the smallest correct edit. The current Skill was tested against an earlier version. Trust what the release did not touch. To write a Skill from nothing, use `generate-package-skill`. ## Inputs - The current Skill directory, and the package at the new version: a name and version, a directory, or prepared source. - The tested version is the version the Skill's first paragraph names. If it names none, stop and report that the Skill needs a full rewrite. - If the tested version equals the new version, change nothing and report that. ## 1. Copy, then diff 1. Copy the current Skill to the destination unchanged. Edit only the copy. 2. Diff the two published versions: `npm diff --diff=PACKAGE@OLD --diff=PACKAGE@NEW`. For a local package, diff the old tarball against the packed build. 3. Read the changelog or release notes between the two versions. 4. List what changed for a consumer: exports, types, options and their defaults, config keys, error messages, CLI flags, peer ranges, engines, and behaviour the notes describe. ## 2. Map changes to the Skill …
Read the whole file at its exact version.
How to install
mdr add skilld-dev/skilld/update-package-skill@sha256:4535afedfbedbf8fThe line at the top of this page pins the label git:20261010.a246e3a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_em4ni7aciis5q4cy)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Oct 7, 2026 and Oct 10, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261010.a246e3a latest | 2026-10-10 | a246e3a | 4,478 B | A | view · diff |
| git:20261007.5797f37 | 2026-10-07 | 5797f37 | 3,972 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4478 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
skilld-dev/skilld · 330 stars · license MIT · pushed 2026-10-10 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_em4ni7aciis5q4cy GET https://markdownregistry.com/api/v1/resolve?ref=skilld-dev/skilld/update-package-skill GET https://markdownregistry.com/api/v1/blob/4535afedfbedbf8fd92732c0eebfde1da18d329d4fcb83a9c7809a950444ce93
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.