Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add product-on-purpose/pm-skills --skill utility-update-pm-skillsgit clone --depth 1 https://github.com/product-on-purpose/pm-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/product-on-purpose/pm-skills/utility-update-pm-skills)<a href="https://agentmods.dev/skills/product-on-purpose/pm-skills/utility-update-pm-skills"><img src="https://agentmods.dev/badge/skills/product-on-purpose/pm-skills/utility-update-pm-skills/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/product-on-purpose/pm-skills/utility-update-pm-skills"><img src="https://agentmods.dev/badge/skills/product-on-purpose/pm-skills/utility-update-pm-skills.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk warn
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.02854 |
| Opus 5.5 | $0.00028 | $0.01142 |
| Sonnet 5.5 | $0.00014 | $0.00571 |
| Haiku 4.5 | $0.00007 | $0.00285 |
Grade A, and why
utility-update-pm-skills scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
2. Use any available method: `curl`, `wget`, `fetch`, GitHub CLI (`gh`), How it starts
The opening of the file, as written. The whole thing — 320 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PM Skills Updater
This skill updates a local pm-skills installation to the latest public release. It validates connectivity, compares versions, detects local modifications, gives the user control over conflict resolution, and produces a structured update report documenting every change.
The updater operates in three phases:
- Pre-flight -- validate internet access and determine version delta.
- Update -- fetch the latest release and apply changes with conflict-aware overwrite-or-skip logic.
- Report -- generate a markdown report summarizing what changed, what was skipped, and what new capabilities are available.
When to Use
- When you want to update your local pm-skills to the latest release
- After a new pm-skills version is announced and you want to pull it in
- When you're unsure whether your local copy is current
- When onboarding to a team that uses pm-skills and you want the latest version
- When you want a structured summary of what changed between your version and the latest
When NOT to Use
- To create or edit individual skills -> use
/pm-skill-builderor/pm-skill-iterate - To validate skills against conventions -> use
/pm-skill-validate - If you are a maintainer working directly on the pm-skills repo (use git instead)
- If you need to pin a specific older version (this skill always targets the latest release)
Instructions
When asked to update pm-skills, follow these steps:
Step 1: Validate Internet Access
Before attempting any remote operations, confirm connectivity to GitHub.
How to validate:
- Attempt to reach the GitHub API or the public repository URL:
https://github.com/product-on-purpose/pm-skills - Use any available method:
curl,wget,fetch, GitHub CLI (gh), or the GitHub MCP tools.
If connectivity fails:
- Report the failure clearly with the error details.
- Suggest troubleshooting steps: check network, proxy settings, VPN, or firewall rules.
- Stop execution. Do not proceed to Step 2.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 320 lines · 71 tokens per session scan A 92676abbf2ab
utility-update-pm-skills is a skill published in the GitHub repository product-on-purpose/pm-skills (766 stars, last pushed yesterday), licensed Apache-2.0. It adds 71 tokens to every session and 2,854 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
agent-spec-generator
Write a production-ready spec for an AI agent: scope, tools and permissions, autonomy levels, stop rules, escalation, failure modes, evals, and rollout. Use when you are about to build, buy, or expand an AI agent and need engineering, legal, and leadership to agree on what it may and may not do.
ai-ship-bar
Define a measurable quality bar for shipping an AI feature: task completion, precision and recall, p95 latency, cost per successful request, eval set design, thresholds, sign-off, regression gates, and post-launch monitoring. Use when an AI feature looks good in demos and you need to decide, with numbers, whether it…
opportunity-solution-trees
Use when asked to "opportunity solution tree", "OST", "Teresa Torres", "map customer opportunities to outcomes", "structure discovery around opportunities", or "compare solutions for a customer need". Helps product teams connect outcomes to customer opportunities and test solutions with Opportunity Solution Trees…
design-sprint
Use when asked to "run a design sprint", "5-day sprint", "prototype in a week", "test ideas before building", or "Jake Knapp sprint". Helps teams go from problem to tested prototype in five days. The Design Sprint framework (created by Jake Knapp at Google Ventures) compresses months of work into one focused week.
growth-loops
Use when asked to "growth loops", "build a growth engine", "design a viral loop", "create a content loop", "move beyond paid acquisition", or "why isn't growth compounding". Helps design self-reinforcing growth systems where output becomes input. The Growth Loops framework (from Brian Balfour / Reforge and Elena…
hierarchy-of-engagement
Use when asked to "define our core action", "North Star metric", "accruing benefits", "improve retention mechanics", "hierarchy of engagement", or "Sarah Tavel framework". Helps consumer products identify the actions and benefits that drive long-term retention. The Hierarchy of Engagement framework (created by Sarah…