upgrade

Upgrade

Role: worker. This command updates the security-assessment plugin to the latest version and ensures its marketplace is set to auto-update going forward.

You have been invoked with the /upgrade command.

Steps

1. Read current version

claude plugin list

Parse the output to find security-assessment and its current version. Also read the installed plugin.json directly:

~/.claude/plugins/cache/*/security-assessment/*/.claude-plugin/plugin.json

Report:

Current version: security-assessment v{version} (installed from {marketplace})

2. Check auto-update status and ask the user

First, check the current auto-update status by running the script below and reporting it to the user.

python3 - <<'PY'
import json, os

PLUGIN = "security-assessment"
home = os.path.expanduser("~")
cwd = os.getcwd()

def load(path):
    try:
        with open(path) as f:
            return json.load(f)
    except FileNotFoundError:
        return None
    except json.JSONDecodeError as e:
        print(f"unknown ({path} is not valid JSON)")
        raise SystemExit(0)

installed = (load(os.path.join(home, ".claude", "plugins", "installed_plugins.json")) or {}).get("plugins", {})
market = next((pid.split("@", 1)[1] for pid in installed if pid.split("@", 1)[0] == PLUGIN and "@" in pid), None)
if not market:
    print("unknown (marketplace not found)")
    raise SystemExit(0)

candidates = [
    os.path.join(cwd, ".claude", "settings.json"),
    os.path.join(cwd, ".claude", "settings.local.json"),
    os.path.join(home, ".claude", "settings.json"),
]
for path in candidates:
    data = load(path)
    if data and market in (data.get("extraKnownMarketplaces") or {}):
        flag = data["extraKnownMarketplaces"][market].get("autoUpdate")
        print("enabled" if flag is True else "disabled")
        raise SystemExit(0)

print("disabled")
PY

Then ask the user:

Auto-update for the {marketplace} marketplace is currently {enabled/disabled}. Would you like to enable auto-update so future releases install automatically? (yes/no)

Note: this flag is marketplace-level and affects every plugin published from {marketplace} — including the companion dev-team plugin if you have it installed.