refresh-cli-skill

refresh-cli-skill is a skill for Claude Code, Codex from PaulRBerg/agent-skills. It costs 29 tokens per session (1,380 once invoked), scanned A, original, MIT.

A maintenance procedure for updating command-line tool guides when installed tool versions change. It checks official release documentation and records the new version in the repository.

In plain words
What is it for?
It is for refreshing one or more `cli-*` skill entries with a specified version and preparing the resulting documentation update for publication.
Why use it?
It prevents CLI instructions, flags, and links from becoming out of date. It also stops when the checkout is dirty or the requested tool version cannot be confirmed.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents); mentions AGENTS.md; mentions Codex.

Good fit It is for refreshing one or more cli-* skill entries with a specified version and preparing the resulting documentation update for publication.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/paulrberg/agent-skills/refresh-cli
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add PaulRBerg/agent-skills --skill refresh-cli
Clone the repo
git clone --depth 1 https://github.com/PaulRBerg/agent-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for refresh-cli-skill

README.md
[![agentmods](https://agentmods.dev/badge/skills/paulrberg/agent-skills/refresh-cli/github.svg)](https://agentmods.dev/skills/paulrberg/agent-skills/refresh-cli)
Your own site
<a href="https://agentmods.dev/skills/paulrberg/agent-skills/refresh-cli"><img src="https://agentmods.dev/badge/skills/paulrberg/agent-skills/refresh-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for refresh-cli-skill

Your own site · 80×15
<a href="https://agentmods.dev/skills/paulrberg/agent-skills/refresh-cli"><img src="https://agentmods.dev/badge/skills/paulrberg/agent-skills/refresh-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 29 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,380 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00029 $0.01380
Opus 5.5 $0.00012 $0.00552
Sonnet 5.5 $0.00006 $0.00276
Haiku 4.5 $0.00003 $0.00138

Measured 17d ago against content hash e82ad328eff3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

refresh-cli-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/internal-skills/refresh-cli-skill.md · 95 lines

How it starts

The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Refresh CLI Skill

Refresh skills/cli-* when an installed CLI is newer than its references/version.txt marker. Review skills/chromium-browser against Chrome DevTools MCP every week, even when the installed version has not changed.

Circadian's weekly maintenance job runs jobs/refresh-cli-skills.sh in an isolated clone of this repository. The job commits, pushes, and publishes the result after validation. It can also request guidance reviews for explicitly named skills whose watched upstream sources changed.

Arguments

  • Accept arguments as <skill>=<version>, for example cli-just=1.43.0 or chromium-browser=1.10.1.
  • Treat each version as an already-normalized semver with no leading v.
  • Accept version pairs only for cli-* and chromium-browser skills.
  • Also accept explicit upstream review names and source notes supplied alongside the pairs. The scheduler says Also review <space-separated names> against them and appends notes from SKILL_REFRESH_UPSTREAM_NOTES.
  • Confirm that every additional name has an existing skills/<name>/SKILL.md. Reject unknown names.
  • Upstream-only reviews need no version pair or references/version.txt marker. Do not invent either.
  • If neither valid skill/version pairs nor explicit upstream review names are supplied, stop.

Workflow

  1. Work in the current checkout. In an isolated clone, never touch the shared ~/projects/agent-skills worktree.
  2. Before editing, confirm the worktree is clean. If it is dirty, stop and report the dirty paths.
  3. For each requested CLI skill:
    • Confirm skills/<cli-skill>/SKILL.md exists.
    • Map cli-<name> to binary <name>. Map cli-coingecko to cg.
    • Confirm the binary's --version output still reports the requested version. If evidence is missing, stop with failure.
    • Read current docs and references that mention versioned features, flags, or upstream links.
    • Inspect official stable release notes and tagged manuals or CLI docs for the requested version.
    • Use installed CLI help to confirm compatibility.
    • Update stale or missing facts. Keep edits terse and preserve local safety rules.
    • Write skills/<cli-skill>/references/version.txt with exactly the requested semver and one trailing newline.
  4. For chromium-browser, complete these steps even when the installed version has not changed:
    • Confirm skills/chromium-browser/SKILL.md exists.
    • Read the installed wrapper ~/.agents/skills/chromium-browser/scripts/chrome-devtools-mcp.sh without changing it. Its source is skills/chromium-browser/scripts/chrome-devtools-mcp.sh in this checkout.
    • Verify the wrapper's installed executable version through package metadata or its --version output. Never start the MCP server for this check.
    • Inspect official stable Chrome DevTools MCP release notes and tagged documentation. Compare them with the installed version and wrapper flags.
    • Update compatible skill guidance and link to the installed release's tagged tool reference. No browser version marker is required.
    • Report stable upstream releases newer than the installed version and wrapper incompatibilities you could not resolve. Never present unreleased or unavailable features as available.
    • Preserve attach-only operation, privacy and header redaction, negotiated-root restrictions, screenshot caps, and shared-browser ownership.
    • When the installed executable's --help shows that a wrapper flag was removed, renamed, or became the default, or that an environment variable the wrapper sets changed, update the source wrapper and tests/chromium-browser/wrapper.bats to match the installed release, then run just bats-test tests/chromium-browser. Otherwise leave the wrapper unchanged. Never change settings, client configuration, or installed copies.
  5. For each additional upstream review name:
    • Read its source notes and affected skill guidance. Inspect every supplied source and the relevant stable changes.
    • Check official documentation and source evidence before changing guidance. Confirm installed compatibility when the proposed guidance depends on an installed tool or dependency.
    • Change only guidance affected by those sources. Preserve local behavior and safety rules.
    • Do not update dependencies or merge external skill forks through this review. Follow @rebase-skill only under its separate invocation policy.
    • Do not create or advance a version marker for an upstream-only review.
  6. Edit only the requested skill directories and, for a wrapper update, tests/chromium-browser/. Never edit generated lockfiles, unrelated skills, installed copies under ~/.agents, or global Claude/Codex configuration.
  7. Run just prettier-write <changed files> --ignore-unknown. Then run just skill-check and just prettier-check skills/<name> ... for every selected skill directory. If a selected directory has an existing formatting failure, format and validate the affected file within that directory. Do not report success while a selected-directory check fails. Complete the local gate for any changed helper or behavior.
  8. If the scheduled weekly job invoked you, stop without committing or publishing. The job performs both steps. Otherwise, commit and publish per AGENTS.md.
  9. Report evidence sources, compatible documentation changes, newer upstream releases, and configuration incompatibilities. If a required check or evidence source fails, report failure instead of claiming success.

Read the full file on GitHub · 95 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 17d ago Changed · +3 lines e82ad328eff3
  2. 20d ago Changed · +2 lines ee88b8619640
  3. 24d ago Changed · +13 lines 3c9e0f14c224
  4. 27d ago Changed · +1 lines 21f552f5d185
  5. 1mo ago Changed · +26 lines 3a529c19415c
  6. 1mo ago First seen · 50 lines · 29 tokens per session scan A e58631fff158

Subscribe to this mod's changes

refresh-cli-skill is a skill published in the GitHub repository PaulRBerg/agent-skills (104 stars, last pushed 2d ago), licensed MIT. It adds 29 tokens to every session and 1,380 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-06.

Related

refresh-cli-skill compared with skills from other repositories

refresh-cli-skill next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
refresh-cli-skillPaulRBerg/agent-skillsSkill1042d agoMITA29Claude Code, Codex
imagegenopenai/codexSkill134ktodayApache-2.0A113Codex
local-ai-agentsmicrosoft/ai-agents-for-beginnersSkill79k2d agoMITA200Claude Code, Codex
playwright-climicrosoft/playwrightSkill100kyesterdayApache-2.0A19Claude Code
browser-automationopenclaw/openclawSkill394ktodayMITA36Claude Code
systematic-debuggingobra/superpowersSkill315k5d agoMITA21Claude Code
next-cache-components-adoptionvercel/next.jsSkill143ktodayMITA95Claude Code