upgrade-plan SKILL.md skillA
upgrade-plan from leek/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add leek/agent-skills/upgrade-plan@git:20261019.0f2f385Pins git:20261019.0f2f385 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- leek/agent-skills
- Path
skills/upgrade-plan/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261019.0f2f385, committed Oct 19, 2026
- First version recorded
- Oct 11, 2026
- Size
- 6,157 bytes
- Repository stars
- 4
- License
- MIT
Plan a library or framework upgrade from the installed version to the latest. Finds what breaks, which local patches and workarounds can go, and what to adopt, sorted into must do, should do, and do later.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Upgrade Plan Plan the upgrade of one or more packages from the installed version to a target. The output is one plan file. The run is **read-only**: it never edits a manifest or runs an install, update, or require. Upgrading is the user's next move, with the plan in hand. The lead (this skill) resolves versions, writes briefs, judges, and writes the plan. Reading changelogs fans out to cheap collectors. Reading the codebase fans out to scouts. The lead re-reads the official upgrade guide for every major version crossed, because a breaking change the collector misses is the costliest miss. ## Steps 1. **Resolve.** Split `$ARGUMENTS` into packages, each with an optional `@target`. Map a loose name to the installed package (`laravel` → `laravel/framework`); if several match, ask which one. For each package, run `bash <skill-dir>/scripts/versions.sh <package> [target]` from the project root. It prints the installed version, the constraint, the latest version, the stable releases crossed, what the target requires, and the installed packages that depend on this one. In another ecosystem (pip, Cargo, …
Read the whole file at its exact version.
How to install
mdr add leek/agent-skills/upgrade-plan@sha256:ff97881d856c2c1aThe line at the top of this page pins the label git:20261019.0f2f385, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_wmnt4pbde4v6uaj4)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Oct 11, 2026 and Oct 19, 2026, about one every 4 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261019.0f2f385 latest | 2026-10-19 | 0f2f385 | 6,157 B | A | view · diff |
| git:20261011.2b4a7fe | 2026-10-11 | 2b4a7fe | 6,101 B | A | view · diff |
| git:20261011.4762164 | 2026-10-11 | 4762164 | 6,127 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6157 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
leek/agent-skills · 4 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_wmnt4pbde4v6uaj4 GET https://markdownregistry.com/api/v1/resolve?ref=leek/agent-skills/upgrade-plan GET https://markdownregistry.com/api/v1/blob/ff97881d856c2c1a49f8e8400e05109e5648262c185277c78bdf1f4989323ab7
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.