goofansu/check-upstream
.pi/skills/check-upstream/SKILL.md
Check whether upstream GitHub repositories have new commits since the local vendored extensions were last updated. Supports multiple vendors — any repo referenced in extensions/Makefile is checked. Use this skill whenever the user asks about upstream changes, new extensions, whether extensions are up to date, syncing with upstream, or anything like "any new commits?", "what's changed upstream?", "are there updates?", or "should I sync?".
$ install --global
skillsauthnpx skillsauth add goofansu/pi-stuff check-upstreamInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 11:11 AM23.2s2 files scanned
SKILL.md
- name:
- check-upstream
- description:
- Check whether upstream GitHub repositories have new commits since the local vendored extensions were last updated. Supports multiple vendors — any repo referenced in extensions/Makefile is checked. Use this skill whenever the user asks about upstream changes, new extensions, whether extensions are up to date, syncing with upstream, or anything like "any new commits?", "what's changed upstream?", "are there updates?", or "should I sync?".
check-upstream
Checks all upstream GitHub repositories referenced in extensions/Makefile for
commits that postdate the local vendored extensions. Supports multiple vendors
(e.g. mitsuhiko/agent-stuff, other-org/other-repo, etc.).
Usage
Run the helper script:
bash .pi/skills/check-upstream/scripts/check.sh
The script automatically:
- Parses
extensions/Makefileto extract allraw.githubusercontent.comURLs - Groups them by GitHub repository and path prefix
- For each upstream, finds the most recent local git commit date across its vendored files
- Queries the GitHub Commits API for any commits newer than that date
- Reports new commits per upstream, or confirms you're up to date
What to do with the results
No new commits — you're up to date, nothing to do.
New commits found — review them, then pull the ones you want:
make -C extensions install # re-downloads all vendored extensions from upstream
Review the diff after (git diff extensions/) before committing, since upstream
changes may conflict with local modifications.
Adding a new vendor
Just add curl lines to extensions/Makefile pointing at the new repo's
raw.githubusercontent.com URLs. The check script will automatically pick them
up — no configuration needed.
Related Skills
goofansu/handoff
data-ai
VerifiedTrustedCommunity
Use when the user asks to hand off the current session to a fresh agent.
1SKILL.mdUpdated Jun 4, 2026
goofansu/web-research
development
VerifiedTrustedCommunity
Use when the user asks to research a topic online, find current information, compare options, or produce a research report.
1SKILL.mdUpdated May 25, 2026
goofansu/transcribe
content-media
VerifiedTrustedCommunity
Use when the user asks to transcribe audio files to text.
1SKILL.mdUpdated May 25, 2026
goofansu/grill-with-docs
testing
VerifiedTrustedCommunity
Grilling session that challenges your plan against the existing domain model, sharpens terminology, and updates documentation (CONTEXT.md, ADRs) inline as decisions crystallise. Use when user wants to stress-test a plan against their project's language and documented decisions.
1SKILL.mdUpdated May 25, 2026