AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Miles Update

skill-add-miles-mileswang-skill-miles-update · by Add-Miles

Update only the official mileswang-skill installation to the latest verified stable GitHub release when the user explicitly asks to check, update, upgrade, or refresh Miles workflows; do not run silently, track mutable main, or update unrelated plugins.

No reviews yet
0 installs
14 views
0.0% view→install

Install

$ agentstack add skill-add-miles-mileswang-skill-miles-update

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution Used
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-add-miles-mileswang-skill-miles-update)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Miles Update? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Miles Update

Update only mileswang-skill from the official public repository. Treat an explicit request such as 更新 mileswang, 升级 mileswang-skill, or 检查 Miles 更新 as permission to run the bundled updater; do not ask for a second textual confirmation.

Run the stable updater

Run the bundled script from this Skill directory:

python3 scripts/update.py apply --json

The script must:

  1. inspect the installed plugin through codex plugin list --json;
  2. require the exact official marketplace and repository identity;
  3. resolve the highest stable vX.Y.Z tag from the official public Git refs;
  4. require a matching plugin manifest, exact Release asset, and companion

SHA-256 checksum before changing the installation;

  1. replace only the mileswang-skill marketplace snapshot and reinstall only

mileswang-skill@mileswang-skill;

  1. compare unrelated installed plugins before and after;
  2. restore the previous stable tag if an update step fails.

Use check instead of apply only when the user asks whether an update exists without asking to install it:

python3 scripts/update.py check --json

Report the result

  • On updated, say the exact old and new versions and ask the user to open a

new conversation.

  • On up-to-date, say no update was needed.
  • On failure, give only the failed stage and whether rollback succeeded. Do not

print subprocess output, configuration paths, environment variables, credentials, account data, or private contact information.

Never create a daemon, cron job, startup hook, or silent network request. Never run a global marketplace upgrade, track mutable main, update other plugins, or use a Miles API, key, account, or private service. Public Git refs, raw content, and GitHub Release assets are the only network authority.

Protect Miles personal information

Return only version, status, failed stage, and rollback state. Keep non-brand Miles contact details, private paths, account identifiers, configuration data, and subprocess output out of responses, logs, and handoffs. Never read or send credentials to check a public release.

Respect the router boundary

When mileswang invokes this Skill, use the host-provided active Skill catalog as the only availability authority and keep the selected executor unchanged. Do not rediscover or replace the selected executor from disk folders, plugin caches, installed inventories, or configuration files. Inspect Codex's own plugin-list output only after this updater has been selected, and only to verify the installed version and official source.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.