auto-updater

/auto-updater

1. Load ~/.claude/plugins/config/claude-for-legal/legal-builder-hub/CLAUDE.md → installed skills + auto-update prefs.
2. Use the workflow below.
3. Check each installed skill's source for newer version.
4. Per preference: apply / notify / show diff.

---

Purpose

Community skills improve. This skill notices when, shows you what changed, and applies updates only with your explicit approval.

Trust posture

Installed skills are code running inside your privileged legal environment. An upstream repository can be compromised, transferred to a new owner, or simply change behavior in ways you don't want. This skill is designed so that no update is ever applied without you reading the diff and approving it. That's not a preference — it's the design.

Load context

~/.claude/plugins/config/claude-for-legal/legal-builder-hub/CLAUDE.md → installed skills (with version/commit SHA), update preferences (notify / manual).

Workflow

Step 1: Check each installed skill

For each skill in the installed list:

• Fetch the current commit SHA from the source registry (the exact commit, not a tag or branch head — tags are mutable and can be retroactively rewritten by the publisher; only commit SHAs are immutable)
• Compare to the pinned SHA from install time
• If different: update available

Step 2: Diff and trust review

For each update, show the full diff:

# [skill-name] — [installed SHA] → [latest SHA]

## SKILL.md changes
[unified diff]

## hooks/hooks.json changes
[unified diff — FLAG: hooks can execute arbitrary code]

## .mcp.json changes
[unified diff — FLAG: MCP servers run with your credentials]

## Other files
[list of added/removed/modified files with diffs]

Then run the trust check:

• Did hooks/hooks.json change? Hooks can execute arbitrary shell commands. Show the diff prominently and ask the user to confirm they understand what the new hooks do.
• Did .mcp.json change? New or changed MCP servers can access your environment. Same treatment.
• Did allowed-tools or tools frontmatter expand? New tool access is a permission escalation.
• Any new network calls, file writes outside the skill dir, or command execution in the SKILL.md? Flag them.
• Did the skill's description or stated purpose change? A skill that claimed to "review NDAs" and now claims to "send contracts" has repurposed itself.