📦

dbs-update

Name: dbs-update
Author: dontbesilent2025

Inhaltsrevision r1 Mittleres Risiko 📁 Dateisystemzugriff🔑 Umgebungsvariablen⚙️ Externe Befehle

Update dbskill and Review Retired Skills

dbskill installations can become outdated across plugin and Skills CLI channels. This skill selects the update workflow, handles retired entries, and reports completion or failure.

Unterstützt: Claude Codex Code(CC)

📊 72 Angemessen

Maintain this Skill? Claim it 📊 72 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "dbs-update" from https://skillstore.io/skills/dontbesilent2025-dbs-update.md and its manifest at https://skillstore.io/api/skills/dontbesilent2025-dbs-update/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/dontbesilent2025-dbs-update.md Signiertes manifest GET /api/skills/dontbesilent2025-dbs-update/manifest Signiertes lockfile GET /api/skills/dontbesilent2025-dbs-update/lockfile

Testen

„dbs-update“ wird verwendet. Update my existing dbskill plugin installation.

Erwartetes Ergebnis:

dbskill updated successfully through the Claude Code plugin channel.
Reload plugins or start a new conversation to load the updated skills.

„dbs-update“ wird verwendet. Preview retired-skill cleanup without changing files.

Erwartetes Ergebnis:

Dry run completed. No files changed.
The retired entry matches a known SKILL.md fingerprint and is marked for backup.
Other files are not covered by this fingerprint check; review customizations before applying cleanup.

„dbs-update“ wird verwendet. Update dbskill and report any failure.

Erwartetes Ergebnis:

The update did not complete because the update service was unreachable. Restore network access and request the update again.

Sicherheitsaudit

Mittleres Risiko

v1 • 17.10.2026 Versionsbericht öffnen

Most static alerts are Markdown formatting, normal application paths, or bounded maintenance operations, not shell backticks, database access, or obfuscation. The Skills CLI update executes an unpinned package with automatic confirmation, creating a supply-chain risk. Cleanup can disable customized skills because ownership checks inspect only SKILL.md fingerprints or bridge text, rather than complete directory contents.

Gescannte Dateien

251

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

scripts/cleanup_retired_skills.py:68-84 scripts/cleanup_retired_skills.py:106-119 SKILL.md:17

Incomplete Ownership Checks Can Disable Customized Skills

Cleanup trusts a matching SKILL.md hash without inspecting other files, so customized scripts or added content can be unlinked or moved from active installation. The Grok bridge fallback also accepts editable marker text and a missing source path as sufficient ownership evidence.

The decision logic checks only SKILL.md or bridge text before unlinking or moving entries. It cannot enforce the stated promise to preserve user-modified skills.

Elemente der Fähigkeitsprüfung (1)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Mittel

SKILL.md:38-40

Ruby/shell backtick execution

```bash

The fenced command runs npx -y skills without a version pin, automatically trusting downloaded package code. A compromised package release could execute with user permissions.

Risikofaktoren

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/dontbesilent2025-dbs-update/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dontbesilent2025-dbs-update/security.svg)](https://skillstore.io/skills/dontbesilent2025-dbs-update?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/dontbesilent2025-dbs-update?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dontbesilent2025-dbs-update/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/dontbesilent2025-dbs-update.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

dontbesilent2025. (2026). dbs-update security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dontbesilent2025-dbs-update/audits/1

BibTeX-Zitat

@techreport{dontbesilent2025-dontbesilent2025-dbs-update-2026,
  author = {dontbesilent2025},
  title = {dbs-update security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/dontbesilent2025-dbs-update/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "dbs-update security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "dontbesilent2025"
date-released: "2026-10-17"
url: "https://skillstore.io/skills/dontbesilent2025-dbs-update/audits/1"
identifiers:
  - type: other
    value: "skillstore:dontbesilent2025-dbs-update:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Refresh Installed Plugins

Update installed dbskill plugins through their existing marketplace channel without creating a duplicate Skills CLI installation.

Maintain Local Agent Skills

Refresh the dbskill repository in a Skills CLI installation and identify retired entries in supported agent directories.

Review Retirement Actions

Preview cleanup decisions, inspect retained items, and review backups before accepting changes to shared development environments.

Diese Prompts ausprobieren

Update dbskill

Update my dbskill installation through its existing channel and report whether the update completed.

Inspect Installation Channels

Identify my dbskill installation channels and explain the applicable update steps. Do not install, update, or remove anything.

Preview Retirement Cleanup

Run only the bundled retirement cleanup script in dry-run mode. Summarize planned removals, backups, and retained entries without changing files.

Audit Customized Retired Entries

Compare each retired entry's complete contents before cleanup. Preserve customized entries, explain fingerprint limitations, and request approval before moving or unlinking anything.

Bewährte Praktiken

Identify the existing installation channel before updating to avoid duplicate installations.
Preview cleanup and inspect complete directory contents before retiring entries with possible customizations.
Use a reviewed Skills CLI version and verify backups and command exit status before accepting completion.

Vermeiden

Use a broad skills-update command that also changes unrelated skills.
Treat an unchanged SKILL.md file as proof that an entire directory is unmodified.
Interpret an isolated numeric reply as update consent without a preceding dbskill update reminder.

Häufig gestellte Fragen

Which installation channels are supported?

The instructions cover Claude Code plugins and Skills CLI installations. Both channels can be updated when both are detected.

Does asking about versions start an update?

No. Version questions should receive an answer without update commands. An explicit update request or contextual confirmation authorizes updating.

Will this update unrelated skills?

The workflow targets the dbskill repository and its named marketplace plugins. It explicitly prohibits the broad skills-update command.

How does cleanup handle customized entries?

It retains entries with unrecognized SKILL.md contents, but may retire customized directories whose SKILL.md still matches. Review complete contents first.

Can cleanup run without changing files?

Yes. The bundled Python script supports dry-run mode. Without Python, the workflow skips local cleanup and requests manual inspection.

Where are retired directories backed up?

Qualifying directories move into a timestamped retired-skills folder under the .dbs application directory. Links are removed without deleting their targets.