plugin-update

plugin-update is a skill for Claude Code from kochetkov-ma/claude-brewcode. It costs 43 tokens per session (3,900 once invoked), scanned C, original, MIT.

A tool for checking, installing, and updating Claude Code plugins, which add capabilities or instructions to the Claude Code coding agent.

In plain words
What is it for?
Checking plugin versions and installing or updating Claude Code plugins.
Why use it?
It helps keep installed plugins current and find available updates.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: model in frontmatter; names the AskUserQuestion tool; mentions Claude Code.

Runs only inside its plugin — its command needs a path that Claude Code sets for a plugin’s own hooks and for nothing else. Install the plugin, not this.

Part of the brewtools plugin — 9 skills, 3 agents shipped together

Good fit Checking plugin versions and installing or updating Claude Code plugins.

Compare 6 skills from other repositories ↓
Install

Getting it into your agent

This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.

Claude Code
/plugin marketplace add kochetkov-ma/claude-brewcode
Claude Code
/plugin install brewtools

Made for: Claude Code.

Or install brewtools, the plugin that ships this one along with the rest of its 9 skills, 3 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for plugin-update

README.md
[![agentmods](https://agentmods.dev/badge/skills/kochetkov-ma/claude-brewcode/plugin-update/github.svg)](https://agentmods.dev/skills/kochetkov-ma/claude-brewcode/plugin-update)
Your own site
<a href="https://agentmods.dev/skills/kochetkov-ma/claude-brewcode/plugin-update"><img src="https://agentmods.dev/badge/skills/kochetkov-ma/claude-brewcode/plugin-update/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for plugin-update

Your own site · 80×15
<a href="https://agentmods.dev/skills/kochetkov-ma/claude-brewcode/plugin-update"><img src="https://agentmods.dev/badge/skills/kochetkov-ma/claude-brewcode/plugin-update.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 43 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,900 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00043 $0.03900
Opus 5.5 $0.00017 $0.01560
Sonnet 5.5 $0.00009 $0.00780
Haiku 4.5 $0.00004 $0.00390

Measured today against content hash 1a52359add7f, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

plugin-update scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

The scan reads SKILL.md. This mod also ships 10 executable files (scripts/discover-plugins.sh, scripts/fetch-latest-versions.sh, scripts/update-flow.mjs, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

case "<dir>" in */plugin-update.*) rm -rf -- "<dir>" && echo "✅ scratch removed OK" || echo "❌ scratch removed FAILED" ;; *) echo "❌ scratch removed FAILED: not a SCRATCH path" ;; esac
brewtools/skills/plugin-update/SKILL.md · 253 lines

How it starts

The opening of the file, as written. The whole thing — 253 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Brewcode Plugin Update

First output: the PLAN block below, as plain text, before any tool call.

Updates every installed claude-brewcode plugin and mod at its own scope without asking what to update, offers what is missing in one question, then prints one report: versions before -> after, what changed for you, numbered next steps. /reload-plugins and the /plugin UI are user handoffs, never tool actions.

Prompt contract

$ARGUMENTS is one free-form RU/EN prompt; the mode token may sit anywhere in it.

  1. Mode: an explicit mode token wins outright; else the most distinct whole-word keyword hits (table below). Tie with check -> check; update vs all -> the keyword that comes first. No hit or empty -> update.
  2. Scope: always every installed claude-brewcode plugin and mod, in every scope; the prompt never narrows the update (user ruling: updating is automatic). A missing plugin or mod named in the prompt is still only an offer: the Phase 3 question (update) or all.
  3. Ask: at most ONE AskUserQuestion per run, at most 2 questions, only in update and only when Phase 2 lists offers; after the PLAN block, before the first change. The update itself is never asked about. check asks nothing; all takes every offer without asking (the word is consent).

Your reply starts with this block, filled from the prompt alone, then Phase 0 runs. Print it once, in every mode, check included (labels and plan values English, INPUT verbatim). A block only in your thinking or only inside a tool call does not count:

PLAN — brewtools:plugin-update
INPUT:  <arguments verbatim, or "(empty)">
MODE:   <resolved> — <explicit | matched keyword: X | default>
SCOPE:  every installed claude-brewcode plugin and mod, every scope; missing ones <update: one question | all: installed | check: listed>
DO:     <2-5 imperative bullets, in phase order>
RESULT: <what the user ends up holding>

Modes

Mode EN keywords RU keywords Mutates? Behavior
update (empty), update, upgrade обнови, обновление yes Phases 0-6: updates every outdated installed row; asks once, only when offers exist
check check, status проверь, статус no Phases 0-2, then the Phase 6 check report; no question, no marketplace refresh
all all, everything, full всё, полностью yes update + every offer installed without asking + other marketplaces' rows + prune

Read the full file on GitHub · 253 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +39 lines · +16 tokens per session scan A → C 1a52359add7f
  2. 2d ago Changed · +5 lines 2b2c80a11760
  3. 3d ago Changed · +8 lines d6aab15e1697
  4. 4d ago Changed · -51 lines bd729d0c093b
  5. 16d ago Changed · +11 lines b5663786149f
  6. 1mo ago First seen · 241 lines · 27 tokens per session scan A 4ae992c7fb41

Subscribe to this mod's changes

plugin-update is a skill published in the GitHub repository kochetkov-ma/claude-brewcode (33 stars, last pushed today), licensed MIT. It adds 43 tokens to every session and 3,900 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

skill-creator-plus

Create, test, evaluate, and improve Claude skills — and answer questions about how skills work. Use for "create a skill", "make a skill for", "write a SKILL.md", "turn this into a skill", "run evals", "test/benchmark my skill", "optimize my skill description", "improve triggering", "A/B test my skill", "blind…

yaniv-golan/skill-creator-plus · 147 tokens

deep-research

Deep Research (/deep-research or /dr) — exhaustive, evidence-based investigation of any topic. Use when the user invokes /deep-research, /dr, asks for deep research, says 'research this thoroughly', wants expert-level analysis on any subject (technical, business, scientific, regulatory, financial, medical, legal…

yachi/claude-skills · 164 tokens

openclaw-setup

Set up, install, configure, and deploy OpenClaw (formerly ClawdBot/MoltBot) — a personal AI assistant that runs on your own devices and connects to messaging channels. Use when users ask to "set up OpenClaw," "install ClawdBot," "install MoltBot," "deploy a personal AI assistant," "configure OpenClaw on Mac," "deploy…

Aznatkoiny/zAI-Skills · 188 tokens

x402-payments

Build applications using the x402 protocol — Coinbase's open standard for HTTP-native stablecoin payments using the HTTP 402 status code. Use this skill when: Creating APIs that require USDC payments per request (seller/server side) Building clients or AI agents that pay for x402-protected resources (buyer/client…

Aznatkoiny/zAI-Skills · 185 tokens

cpp-reinforcement-learning

C++ Reinforcement Learning best practices using libtorch (PyTorch C++ frontend) and modern C++17/20. Use when: Implementing RL algorithms in C++ for performance-critical applications Building production RL systems with libtorch Creating replay buffers and experience storage Optimizing RL training with GPU acceleration…

Aznatkoiny/zAI-Skills · 83 tokens

prompt-optimizer

Optimize prompts for Claude's latest models (Claude 5 family — Opus 5, Sonnet 5, Fable 5 — plus the still-active Opus 4.8, Sonnet 4.6, and Haiku 4.5) using Anthropic's official prompt-engineering guidance. Use when users want to improve, refine, debug, or create prompts or system prompts for Claude. Triggers include…

Aznatkoiny/zAI-Skills · 205 tokens