agentmods.dev

update-project

update-project is a skill for Claude Code from Everyone-Needs-A-Copilot/claude-copilot. It costs 35 tokens per session (615 once invoked), scanned A, original, MIT.

A skill for refreshing an existing project-local Codex Copilot setup from a shared framework mirror. It compares framework-owned files by content and preserves files marked as project-owned.

In plain words
What is it for?
Use it to update or repair a project's Codex Copilot wiring, review changed and preserved paths, and keep the project aligned with a pinned framework version.
Why use it?
It updates stale or drifted setup files without overwriting intentional project customisations, and distinguishes updating an existing setup from creating a new one.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions AGENTS.md; mentions Codex; $skill-name invocation.

Part of the claude-copilot plugin — 73 skills, 18 commands, 16 agents, 6 hooks shipped together

not rated 14repo changed 6d ago A scan 35 tokens original MIT

Good fit Use it to update or repair a project's Codex Copilot wiring, review changed and preserved paths, and keep the project aligned with a pinned framework version.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/everyone-needs-a-copilot/claude-copilot/update-project
View source ↗ Everyone-Needs-A-Copilot/claude-copilot ineedacopilot.com
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Everyone-Needs-A-Copilot/claude-copilot --skill update-project
Clone the repo
git clone --depth 1 https://github.com/Everyone-Needs-A-Copilot/claude-copilot

Made for: Claude Code.

Or install claude-copilot, the plugin that ships this one along with the rest of its 73 skills, 18 commands, 16 agents, 6 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for update-project

README.md
[![agentmods](https://agentmods.dev/badge/skills/everyone-needs-a-copilot/claude-copilot/update-project/github.svg)](https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/update-project)
Your own site
<a href="https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/update-project"><img src="https://agentmods.dev/badge/skills/everyone-needs-a-copilot/claude-copilot/update-project/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for update-project

Your own site · 80×15
<a href="https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/update-project"><img src="https://agentmods.dev/badge/skills/everyone-needs-a-copilot/claude-copilot/update-project.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 35 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 615 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00035 $0.00615
Opus 5.5 $0.00014 $0.00246
Sonnet 5.5 $0.00007 $0.00123
Haiku 4.5 $0.00003 $0.00061

Measured 6d ago against content hash 237c61d5c835, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

update-project scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/codex-copilot/skills/update-project/SKILL.md · 38 lines

How it starts

The opening of the file, as written. The whole thing — 38 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Update Project

Refresh project-local Codex Copilot wiring in place.

Workflow

  1. Run scripts/update-project.sh --project <path>. Unless --framework-root is given explicitly, it syncs from the pinned mirror (~/.copilot/mirrors/codex-foundation by default) rather than wherever the framework repo happens to be checked out, so a project is never synced ahead of any released version. It updates an EXISTING install; if the project has never been set up, it exits and points at $setup-project / scripts/setup-project.sh instead.
  2. Every framework-owned file under plugins/codex-copilot/, plus scripts/copilot-gate.sh, is discovered and compared by content (sha256), not by declared version, so new hook assets and drift that does not match a released version are repaired too.
  3. A file marked ownership: project -- via owner: project YAML frontmatter in the file itself, or a copilot.lock.json entry -- is never touched. Confirm the report's "Preserved" section lists exactly the paths a human intentionally customized.
  4. AGENTS.md, SOUL.md, docs/40-initiatives/, .agents/plugins/marketplace.json are never touched by the updater; .codex-copilot.json only has its framework-tracking fields merged (projectName/pluginPath preserved).
  5. Idempotent: run it twice to confirm the second run reports "no changes needed." Use --dry-run to preview without writing.
  6. Validate with cc skill list, cc docs sources, cc memory check --json, and tc progress --json when available.
  7. If optional packs are needed, activate them with scripts/activate-pack.py instead of copying pack files manually.

Output

  • files updated / added / unchanged / preserved / retired (from the script's report)
  • skill symlink and .codex-copilot.json status
  • copilot.lock.json write confirmation
  • idempotence check (second run == no changes needed)

Work Lifecycle

Apply the shared work lifecycle once per task, including direct invocation of this skill: start/resume, maintain, pause/handoff, finish and later reuse. Keep the checkpoint proportional in the existing record; a small answer does not need a new task or document.

Read the full file on GitHub · 38 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago Changed 237c61d5c835
  2. 7d ago Changed · +12 lines a57b34a90e84
  3. 1mo ago Changed ab7c4f4f47da
  4. 1mo ago First seen · 26 lines · 35 tokens per session scan A de56ca578240

Subscribe to this mod's changes

update-project is a skill published in the GitHub repository Everyone-Needs-A-Copilot/claude-copilot (14 stars, last pushed yesterday), licensed MIT. It adds 35 tokens to every session and 615 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.

Building agentsClaude Codeai-agentsai-frameworkanthropicclaudedeveloper-tools
Related

Other skills, from other repositories

theokit-agents

TheoKit agent/LLM integration — agents/.ts convention (AgentBuilder), the tool() builder, capabilities (advanced/DI), useAgent client hook.

usetheokit/theokit · 36 tokens

theokit-ui

@theokit/ui AI-native component library — AI-agent surfaces (ChatThread, ChatMessage, ChatComposer, ToolCallCard, AgentStream), theming, providers; generic primitives (CodeBlock, Sidebar, Button) come from @usetheo/ui.

usetheokit/theokit · 54 tokens

theokit-gateways

Receiving messages from Telegram, WhatsApp, Slack and other platforms — handleChannelWebhook, the @theokit/gateway- adapters, signature validation, the onMessage seam.

usetheokit/theokit · 39 tokens

theokit-frontend

TheoKit frontend — file-based routing, layouts, theoFetch typed client, useAgent, React patterns.

usetheokit/theokit · 25 tokens

theokit-routes

TheoKit server routes — the route() builder, Zod validation, HTTP methods, dynamic params, error handling.

usetheokit/theokit · 27 tokens

theokit-config

TheoKit configuration — the config() builder, plugins, security, storage, agents, build targets.

usetheokit/theokit · 23 tokens