Borrowing it
Nothing to install: this file belongs to patrickjaja/claude-desktop-extra. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/patrickjaja/claude-desktop-extra/master/.claude/skills/fresh-upstream/SKILL.mdgit clone --depth 1 https://github.com/patrickjaja/claude-desktop-extraWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/patrickjaja/claude-desktop-extra/fresh-upstream)<a href="https://agentmods.dev/skills/patrickjaja/claude-desktop-extra/fresh-upstream"><img src="https://agentmods.dev/badge/skills/patrickjaja/claude-desktop-extra/fresh-upstream/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/patrickjaja/claude-desktop-extra/fresh-upstream"><img src="https://agentmods.dev/badge/skills/patrickjaja/claude-desktop-extra/fresh-upstream.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 5 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- high Tool Misuse · line 41 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- medium Rogue Agent · line 5 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00083 | $0.01021 |
| Opus 5 | $0.00042 | $0.00511 |
| Sonnet 5 | $0.00017 | $0.00204 |
| Haiku 4.5 | $0.00008 | $0.00102 |
Grade C, and why
fresh-upstream scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
allowed-tools: Bash(rm -rf *), Bash(mkdir -p *), Bash(ar *), Bash(tar *), Bash(dpkg-deb *), Bash(asar *), Bash(node --check *), Bash(ls *), Bash(cat *), Bash(stat *), Bash(.github/scripts/apt-fetch-verify.sh *), Bash(sha How it starts
The opening of the file, as written. The whole thing — 69 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Fresh upstream extract (clean, unpatched)
Goal: a pristine unpatched bundle in ./tmp/ so patch work compares against the true upstream. Run from the repo root. ./tmp/ is gitignored.
Critical: scripts/build-patched-tarball.sh runs apply_patches.py - its output is PATCHED. For a clean baseline use the manual fetch + asar flow below.
Steps
-
cd to the repo and read tracked version:
cd "$(git rev-parse --show-toplevel)" cat .upstream-version -
Resolve latest upstream version (GPG + SHA256-verified via the canonical fetcher):
LATEST_VERSION=$(.github/scripts/apt-fetch-verify.sh poll) echo "upstream latest: $LATEST_VERSION"Report latest vs
.upstream-versionso the user sees whether this is a new version. -
Download + verify the official .deb if missing or stale.
apt-fetch-verify.sh downloadresolves the highest amd64 version, downloads the.debinto./tmp/, and verifies its SHA256 against the signed Packages index (which is itself verified against the GPG-signed Release):mkdir -p ./tmp DEB=$(.github/scripts/apt-fetch-verify.sh download amd64 ./tmp) echo "verified .deb: $DEB"(~150MB.) If the download or verification fails, stop and report - do NOT trust an unverified
.deb. -
Wipe old extracted bundles (project-local only - never touch ~/.config/Claude):
rm -rf ./tmp/extract ./tmp/app.asar.contents ./extract ./build/work 2>/dev/null || trueLeave the freshly downloaded
./tmp/claude-desktop_*_amd64.debin place and leave./build/packages alone unless the user asked for a full clean. -
Extract clean, unpatched to
./tmp/. Crack the.deb(dpkg-deb -x, orar+tarifdpkg-debis unavailable), thenasar extractthe app.asar:dpkg-deb -x "$DEB" ./tmp/extract asar extract ./tmp/extract/usr/lib/claude-desktop/resources/app.asar ./tmp/app.asar.contents- Unpatched main bundle:
./tmp/app.asar.contents/.vite/build/index.js - Renderer bundles:
./tmp/app.asar.contents/.vite/renderer/*/assets/*.js - ion-dist (3P-config SPA):
./tmp/extract/usr/lib/claude-desktop/resources/ion-dist/ - i18n:
./tmp/extract/usr/lib/claude-desktop/resources/*.json
- Unpatched main bundle:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 69 lines · 83 tokens per session scan C 427b57ac3b83
fresh-upstream is a skill published in the GitHub repository patrickjaja/claude-desktop-extra (622 stars, last pushed yesterday), licensed MIT. It adds 83 tokens to every session and 1,021 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
bastra-recall
Persistent external brain for ChatGPT, Codex, Claude, and other MCP clients — documents (PDFs, contracts, scans with OCR), personal facts (appointments, decisions, items, amounts), AND code lessons / preferences / project topology. USE PROACTIVELY in three modes. (1) RECALL — whenever the user asks about anything from…
bastra-recall
Proactive private local memory for ChatGPT and Codex — recall before acting, save durable rules, lessons and decisions without being asked. Requires the local bastra-recall MCP server installed by bastra install codex.
calibre-distill-topic
Synthesize ONE topic across MULTIPLE Calibre books into a single, concept-keyed agent skill — original multi-source authorship (decision frameworks, cross-source config tables, an explicit where-authors-agree/disagree section), with a full ISBN bibliography that doubles as a live-source binding for later deep dives.…
calibre-mcp-setup
Install and verify the calibre-mcp server, end to end. Guides an agent from 'Calibre is installed' to a verified working MCP connection: preflight (Node, calibredb, Content Server — macOS/Windows/Linux commands), client-specific install (Claude Code plugin or claude mcp add, Claude Desktop .mcpb or JSON config, Cowork…
calibre-study-notes
A tool that creates study notes from books in a Calibre library for a human learner. It uses questions, recall exercises, source pointers, and optional Anki export rather than only providing a summary.
himalayas-employer
AI hiring assistant for Himalayas. Post remote jobs, manage company profiles, source talent, message candidates, and benchmark salaries using the Himalayas MCP server.