A skill that reviews an existing generated system's knowledge and methods, then proposes improvements using a research graph. It presents upgrade suggestions instead of applying them automatically.

Use it to review one skill or all generated skills, compare their methods with research, and prepare justified upgrade proposals.

It helps identify ways to improve generated skills while keeping the developer in control of implementation. It also uses the project's configuration and vocabulary when available.

upgrade — Skill for Claude Code and Codex by agenticnotetaking: A skill that reviews an existing generated system's knowledge…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/agenticnotetaking/arscontexta/upgrade

Any agent

npx skills add agenticnotetaking/arscontexta --skill upgrade

Clone the repo

git clone --depth 1 https://github.com/agenticnotetaking/arscontexta

Made for: Claude Code, Codex.

Or install arscontexta, the plugin that ships this one along with the rest of its 26 skills, 1 agent, 2 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/agenticnotetaking/arscontexta/upgrade.svg)](https://agentmods.dev/skills/agenticnotetaking/arscontexta/upgrade)

Your own site

<a href="https://agentmods.dev/skills/agenticnotetaking/arscontexta/upgrade"><img src="https://agentmods.dev/badge/skills/agenticnotetaking/arscontexta/upgrade.svg" alt="Measured on agentmods" height="20"></a>

Per session 56 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,390 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 1 finding. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00056	$0.03390
Opus 5	$0.00028	$0.01695
Sonnet 5	$0.00011	$0.00678
Haiku 4.5	$0.00006	$0.00339

Measured 3d ago against content hash 5309922b893c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

upgrade scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Enumerates other installed skillsmediumAgent snooping

Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.

for dir in .claude/skills/*/; do

skills/upgrade/SKILL.md · 396 lines

How it starts

The opening of the file, as written. The whole thing — 396 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Runtime Configuration (Step 0 — before any processing)

Read these files to configure domain-specific behavior:

ops/derivation-manifest.md — vocabulary mapping, platform hints
- Use vocabulary.notes for the notes folder name
- Use vocabulary.note / vocabulary.note_plural for note type references
- Use vocabulary.reduce for the extraction verb
- Use vocabulary.reflect for the connection-finding verb
- Use vocabulary.reweave for the backward-pass verb
- Use vocabulary.verify for the verification verb
- Use vocabulary.rethink for the meta-cognitive verb
- Use vocabulary.topic_map for MOC references
ops/config.yaml — processing depth, domain context
ops/derivation.md — derivation state and engine version

If these files don't exist, use universal defaults.

EXECUTE NOW

Target: $ARGUMENTS

Parse immediately:

If target contains a specific skill name (e.g., "upgrade reduce"): check only that skill
If target contains "--all": check all generated skills
If target is empty: check all generated skills (same as --all)

START NOW. Reference below defines the upgrade process.

Why Consultation, Not Hashing

Skills do not upgrade through hash comparison against a generation manifest. Hash comparison answers a narrow question: "Has this file changed?" Meta-skill consultation answers the right question: "Is this skill's approach still the best approach given what we know?"

A skill could be unchanged but outdated because the knowledge base has grown. Or a skill could be heavily edited by the user but already incorporate the latest thinking through a different path. Reasoning about methodology is more valuable than diffing bytes.

Two Upgrade Paths

Generated skills and meta-skills follow fundamentally different upgrade mechanisms:

Category	Skills	Upgrade Mechanism
Generated skills	/{vocabulary.reduce}, /{vocabulary.reflect}, /{vocabulary.reweave}, /{vocabulary.verify}, /ralph, /next, /remember, /{vocabulary.rethink}, /stats, /graph, /tasks, /refactor, /learn, /recommend, /ask	Runtime consultation with knowledge graph
Meta-skills	/setup, /architect, /health, /reseed, /add-domain, /help, /tutorial, /upgrade	Plugin release cycle — update the plugin itself

Read the full file on GitHub · 396 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

skill.json 528 B

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago First seen · 396 lines · 56 tokens per session scan B 5309922b893c

Subscribe to this mod's changes

upgrade is a skill published in the GitHub repository agenticnotetaking/arscontexta (3,486 stars, last pushed 6mo ago), licensed MIT. It adds 56 tokens to every session and 3,390 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Building agents claude-code claude-code-plugin knowledge-base knowledge-management markdown second-brain

dogfood

Run a dogfooding session for hyalo — build from source, exercise the CLI against real knowledgebases (own KB, MDN, GitHub Docs, VS Code docs), find bugs, verify recent fixes, assess UX, measure performance, and write a structured report. Use this skill whenever the user says /dogfood, "dogfood", "run a dogfood…

ractive/hyalo · 102 tokens

release

Cut a hyalo release end-to-end — verify/bump the workspace version, rotate the changelog with hyalo itself, sync the winget fork, publish the GitHub release with curated + auto-generated notes, and watch the pipeline. Use this skill whenever the user wants to release a new hyalo version, cut/tag/publish vX.Y.Z, says…

ractive/hyalo · 102 tokens

review-rust

Perform critical Rust code reviews covering correctness, edition 2024 compliance, error handling, API design, async pitfalls, and dependency hygiene. ALWAYS use this skill when the user wants to review, audit, or critically evaluate Rust code — whether that's a PR diff, a specific crate or module, a cross-cutting…

ractive/hyalo · 177 tokens

security-audit

REQUIRED skill for any security-related request. Use this skill whenever the user wants to find anything dangerous, sensitive, or risky in their code, files, or repository. This includes but is not limited to: scanning for secrets/keys/tokens/credentials, checking dependencies for vulnerabilities, auditing destructive…

ractive/hyalo · 150 tokens

hyalo-tidy

../../../crates/hyalo-cli/templates/skill-hyalo-tidy.md.

ractive/hyalo · 0 tokens

hyalo

../../../crates/hyalo-cli/templates/skill-hyalo.md.