update

update is a command for coding agents from wookiya1364/scv-claude-code. It costs 68 tokens per session (917 once invoked), scanned B, original, MIT.

A read-only command that compares the installed SCV plugin with its newest release and explains how to update it.

In plain words
What is it for?
Use it when checking the installed version or when you need guidance for updating SCV.
Why use it?
It answers whether the plugin is current without changing project files or pretending to update the host plugin itself.

Command

Part of the scv plugin — 1 skill, 15 commands, 4 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/wookiya1364/scv-claude-code/update
Clone the repo
git clone --depth 1 https://github.com/wookiya1364/scv-claude-code

Or install scv, the plugin that ships this one along with the rest of its 1 skill, 15 commands, 4 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for update

README.md
[![agentmods](https://agentmods.dev/badge/commands/wookiya1364/scv-claude-code/update.svg)](https://agentmods.dev/commands/wookiya1364/scv-claude-code/update)
Your own site
<a href="https://agentmods.dev/commands/wookiya1364/scv-claude-code/update"><img src="https://agentmods.dev/badge/commands/wookiya1364/scv-claude-code/update.svg" alt="Measured on agentmods" height="20"></a>
Per session 68 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 917 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00068 $0.00917
Opus 5 $0.00034 $0.00458
Sonnet 5 $0.00014 $0.00183
Haiku 4.5 $0.00007 $0.00092

Measured 3d ago against content hash a3121b0b6e96, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

update scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

1. `~/.claude/settings.json` (or project `.claude/settings.json` / `.claude/settings.local.json`) — `language` key.
commands/update.md · 84 lines

How it starts

The opening of the file, as written. The whole thing — 84 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/scv:update

Update the installed SCV plugin to the latest release.

Claude Code's slash commands cannot self-update the host plugin directly — this command runs a version diagnostic and walks the user through the two built-in commands required: /plugin marketplace update <name> and /reload-plugins.

Language preference

Resolve the user's preferred language with this priority, then use it for status messages and questions:

  1. ~/.claude/settings.json (or project .claude/settings.json / .claude/settings.local.json) — language key.
  2. Project .envSCV_LANG.
  3. Auto-detect from the user's most recent message language.
  4. Default to English.

Technical identifiers (slash command names like /plugin marketplace update, plugin/marketplace names, version tags) stay as-is in every language.

Protocol

Step 1 — Run the diagnostic

"${CLAUDE_PLUGIN_ROOT}/scripts/update.sh"

Parse the output keys:

  • INSTALLED_VERSION: — current plugin.json version
  • MARKETPLACE_NAME: — marketplace.json root name (scv-claude-code)
  • PLUGIN_NAME: — plugin.json name (scv)
  • LATEST_VERSION: — latest GitHub release tag (gh CLI), or (unavailable — ...) with reason
  • UP_TO_DATE:yes / no / unknown

Step 2 — Report + guide based on UP_TO_DATE

Branch by UP_TO_DATE value:

Value Action
yes Report: "Already on latest (<INSTALLED_VERSION>). No action needed." Stop.
no Report: "Installed <INSTALLED_VERSION> → latest <LATEST_VERSION>." Then proceed to Step 3 (guide commands).
unknown Report the unavailability reason (from LATEST_VERSION: line). Then ask via AskUserQuestion whether to proceed with manual update commands anyway (Step 3) or stop.

Step 3 — Guide the two built-in commands

Print to the user, in the resolved language:

To update, run these two commands in this Claude Code session:

/plugin marketplace update <MARKETPLACE_NAME>
/reload-plugins

The first refreshes the marketplace's local copy. The second activates the updated plugin without restarting Claude Code.

After both run, re-invoke /scv:update to verify the new version is detected.

Read the full file on GitHub · 84 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 84 lines · 68 tokens per session scan B a3121b0b6e96

Subscribe to this mod's changes

update is a command published in the GitHub repository wookiya1364/scv-claude-code (7 stars, last pushed 6d ago), licensed MIT. It adds 68 tokens to every session and 917 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.