gsd:update

A command for updating the Get Shit Done toolkit while showing the installed version, newest version, and changes between them. It checks the package registry and displays a changelog before updating.

In plain words
What is it for?
Use it to check for a newer toolkit release, review its changelog, confirm an update, or see instructions for updating when the package registry is unavailable.
Why use it?
It makes updates easier to review than running the raw installer alone, and stops with a clear message when the toolkit is current or an update check fails.

Command for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/geoloeg-ist/agents-reverse-engineer/update
Clone the repo
git clone --depth 1 https://github.com/GeoloeG-IsT/agents-reverse-engineer

Made for: Claude Code.

Per session 14 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 954 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00014 $0.00954
Opus 5 $0.00007 $0.00477
Sonnet 5 $0.00003 $0.00191
Haiku 4.5 $0.00001 $0.00095

Measured 3d ago against content hash 414c16ff78a0, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

gsd:update scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

cat ./.claude/get-shit-done/VERSION 2>/dev/null
.claude/commands/gsd/update.md · 173 lines

What it actually says

Provides a better update experience than raw npx get-shit-done-cc by showing version diff and changelog entries.

cat ./.claude/get-shit-done/VERSION 2>/dev/null

If VERSION file missing:

## GSD Update

**Installed version:** Unknown

Your installation doesn't include version tracking.

Running fresh install...

Proceed to install step (treat as version 0.0.0 for comparison).

npm view get-shit-done-cc version 2>/dev/null

If npm check fails:

Couldn't check for updates (offline or npm unavailable).

To update manually: `npx get-shit-done-cc --global`

STOP here if npm unavailable.

If installed == latest:

## GSD Update

**Installed:** X.Y.Z
**Latest:** X.Y.Z

You're already on the latest version.

STOP here if already up to date.

If installed > latest:

## GSD Update

**Installed:** X.Y.Z
**Latest:** A.B.C

You're ahead of the latest release (development version?).

STOP here if ahead.

  1. Fetch changelog (same as fetch_changelog step)
  2. Extract entries between installed and latest versions
  3. Display preview and ask for confirmation:
## GSD Update Available

**Installed:** 1.5.10
**Latest:** 1.5.15

### What's New
────────────────────────────────────────────────────────────

## [1.5.15] - 2026-01-20

### Added
- Feature X

## [1.5.14] - 2026-01-18

### Fixed
- Bug fix Y

────────────────────────────────────────────────────────────

⚠️  **Note:** The installer performs a clean install of GSD folders:
- `./.claude/commands/gsd/` will be wiped and replaced
- `./.claude/get-shit-done/` will be wiped and replaced
- `./.claude/agents/gsd-*` files will be replaced

Your custom files in other locations are preserved:
- Custom commands in `./.claude/commands/your-stuff/` ✓
- Custom agents not prefixed with `gsd-` ✓
- Custom hooks ✓
- Your CLAUDE.md files ✓

If you've modified any GSD files directly, back them up first.

Use AskUserQuestion:

  • Question: "Proceed with update?"
  • Options:
    • "Yes, update now"
    • "No, cancel"

If user cancels: STOP here.

npx get-shit-done-cc --global

Capture output. If install fails, show error and STOP.

Clear the update cache so statusline indicator disappears:

rm -f ./.claude/cache/gsd-update-check.json
╔═══════════════════════════════════════════════════════════╗
║  GSD Updated: v1.5.10 → v1.5.15                           ║
╚═══════════════════════════════════════════════════════════╝

⚠️  Restart Claude Code to pick up the new commands.

[View full changelog](https://github.com/glittercowboy/get-shit-done/blob/main/CHANGELOG.md)

<success_criteria>

  • Installed version read correctly
  • Latest version checked via npm
  • Update skipped if already current
  • Changelog fetched and displayed BEFORE update
  • Clean install warning shown
  • User confirmation obtained
  • Update executed successfully
  • Restart reminder shown </success_criteria>
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 173 lines · 14 tokens per session scan B 414c16ff78a0

Subscribe to this mod's changes

gsd:update is a command published in the GitHub repository GeoloeG-IsT/agents-reverse-engineer (20 stars, last pushed 26d ago), licensed MIT. It adds 14 tokens to every session and 954 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.