nix-flake-update-check SKILL.md skillA
nix-flake-update-check from kihara777/nixkits is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kihara777/nixkits/nix-flake-update-check@git:20261022.edd2befPins git:20261022.edd2bef in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kihara777/nixkits
- Path
skills/nix-flake-update-check/SKILL.md- Versions recorded
- 18
- Latest version
- git:20261022.edd2bef, committed Oct 22, 2026
- First version recorded
- Sep 16, 2026
- Size
- 49,055 bytes
- Repository stars
- 28
- License
- MIT
检查任意 nix flake 仓库中软件包的上游版本更新并升级——开工前先同步远端并核对活跃 issue / PR、按包型（npm / cmake / Rust / fetchurl / python）分流的 hash 更新流程与自托管 forge（Gitea）取源、开工前的交互式澄清（支持提问的智能体须主动使用以确保一次跑完）、同账户子项目的链式并行检查（含回环与依赖冲突防护）、版本语义变化时文档须重写而非机械替换、文档外部链接的失效审计、GitHub Actions 的 SHA 固定更新检查、外部自动化 PR 的 hash 修补、推送后对 CI 构建的验证（失败按日志原文分类为偶发/真失败，附各形态修复方案与失败时的交互式选项）、flake.lock 处置、补丁内版本检查与 nixpkgs 漂移陷阱。仓库特有的文档与日志环节经「仓库适配层」注入。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# nix flake 软件包更新检查（通用） 检查 nix flake 仓库中各软件包的上游发布更新并执行版本升级。 本技能只包含**与仓库无关**的通用方法。仓库特有的环节（文档同步、维护日志、 内置插件清单等）由**仓库适配层**提供——见文末「仓库适配层」。 ## 本技能的文件构成 **主流程在本文档**；两份配套参考按需查阅，不必通读： | 文件 | 内容 | 何时读 | |---|---|---| | **`SKILL.md`**（本文） | 交互式澄清 + 第 0~9 步主流程 + 适配层契约 | 始终 | | [`builders.md`](builders.md) | 按 builder 的 hash 更新流程、`flake.lock` 处置 | 第 4 步 | | [`traps.md`](traps.md) | nixpkgs 漂移陷阱、fail-closed 校验、外链审计、Actions 更新、补丁内版本 | 第 2 步末尾（Actions）与第 7 步自检命中时 | ## 交互式澄清：一次流程内解决所有待定项 **在开始前先判断所运行的智能体是否支持交互式提问**（如 DSH 提供 `ask_user_question`，可一次提出多个问题并等待用户选择）。**支持就积极使用** ——凡是不确定、有多种合理做法、或必须由用户拍板的事项，**当场问**，不要 先按自己的猜测执行完、再让用户在下一条消息里纠正。 **为什么这条是强要求**：软件更新是**多决策点**流程（升级策略、跨大版本取舍、 依赖冲突的解法、通道选择、是否部署）。若每个决策点都退化成「猜一次 → 被纠正 → 重来」，一次更新会膨胀成多轮往返，且**每次重来都要重跑构建**——而构建是 本流程最贵的环节（Rust/python 包动辄数十分钟）。把决策点前置到开始之前， 整个流程才可能**一次跑完**。 ### 必须提问的情形 | 情形 | 为什么必须问 | |---|---| | **跨大版本升级**（3.x → 4.x） | 可能含 breaking change、新的硬性要求，或需要用户接受行为变化 | | **依赖冲突有两种以上合理解法** | 如「抬依赖版本」vs「跳过该包」vs「打补丁放宽校验」——代价与风险差别很大，且有的会破坏上游安全契约 | | **需要新增 overlay / 补丁 / 额外 vendored 包** | 增加维护面，属结构性改动 | | **构建时长或体积显著增加** | 用户可能宁愿暂缓 | | **通道选择**（stable / next / alpha） | 取决于用户想跟哪条线，技能无法推断 | | **是否部署到运行中的系统** | 影响生产环境 | …
Read the whole file at its exact version.
How to install
mdr add kihara777/nixkits/nix-flake-update-check@sha256:74e6a0b524349ed2The line at the top of this page pins the label git:20261022.edd2bef, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_udscfzzg3ynsmxpy)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 18 versions of this file, between Sep 16, 2026 and Oct 22, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261022.edd2bef latest | 2026-10-22 | edd2bef | 49,055 B | A | view · diff |
| git:20261021.fa35416 | 2026-10-21 | fa35416 | 47,268 B | A | view · diff |
| git:20261020.d022979 | 2026-10-20 | d022979 | 46,341 B | A | view · diff |
| git:20261017.ba7a5c1 | 2026-10-17 | ba7a5c1 | 45,882 B | A | view · diff |
| git:20261015.674b1b4 | 2026-10-15 | 674b1b4 | 45,712 B | A | view · diff |
| git:20261015.c4599e8 | 2026-10-15 | c4599e8 | 44,410 B | A | view · diff |
| git:20261002.6ff84e3 | 2026-10-02 | 6ff84e3 | 43,134 B | A | view · diff |
| git:20261002.c10de09 | 2026-10-02 | c10de09 | 37,425 B | A | view · diff |
| git:20260927.c5022ea | 2026-09-27 | c5022ea | 32,082 B | A | view · diff |
| git:20260920.dac80a7 | 2026-09-20 | dac80a7 | 31,446 B | A | view · diff |
| git:20260920.23e11a5 | 2026-09-20 | 23e11a5 | 30,930 B | A | view · diff |
| git:20260920.34368c1 | 2026-09-20 | 34368c1 | 29,973 B | A | view · diff |
| git:20260917.e0b1a64 | 2026-09-17 | e0b1a64 | 24,828 B | A | view · diff |
| git:20260917.55674f2 | 2026-09-17 | 55674f2 | 39,185 B | A | view · diff |
| git:20260917.442e5d1 | 2026-09-17 | 442e5d1 | 37,227 B | A | view · diff |
| git:20260917.c7de9b6 | 2026-09-17 | c7de9b6 | 35,210 B | A | view · diff |
| git:20260917.c08f5c9 | 2026-09-17 | c08f5c9 | 28,728 B | A | view · diff |
| git:20260916.667bf6e | 2026-09-16 | 667bf6e | 13,205 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (49055 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kihara777/nixkits · 28 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_udscfzzg3ynsmxpy GET https://markdownregistry.com/api/v1/resolve?ref=kihara777/nixkits/nix-flake-update-check GET https://markdownregistry.com/api/v1/blob/74e6a0b524349ed29173c0a7b29ad55d1f51fdb940c7229d58ca797d7a7a8954
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.