Install
$ agentstack add skill-shivae372-claude-bootstrap-self-update Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ● Filesystem access Used
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Purpose
Keep a project's bootstrap config current without clobbering the user's customizations.
When To Use This
- The user runs
/updateor asks "is my Claude setup outdated?"
Steps
1. Read the installed version
python3 -c 'import json,pathlib; p=pathlib.Path(".claude/.bootstrap.json"); \
print(json.loads(p.read_text()).get("bootstrap_version","unknown") if p.exists() else "unknown")'
2. Read the latest version from the source repo
curl -fsSL https://raw.githubusercontent.com/shivae372/claude-bootstrap/master/VERSION 2>/dev/null || echo unknown
3. Compare and report (plain language)
- Up to date → say so and stop.
- Outdated → summarize what changed using the repo's CHANGELOG.md
(curl -fsSL https://raw.githubusercontent.com/shivae372/claude-bootstrap/master/CHANGELOG.md).
4. Apply selectively (only what the user approves)
Offer: hooks, skills, commands, stack templates, or just-show-me. For each chosen item:
- Back up first:
cp .bak - Re-run the installer in merge mode to pull only new/updated component files:
curl -fsSL https://raw.githubusercontent.com/shivae372/claude-bootstrap/master/install.sh | bash -s -- --merge
- Update
bootstrap_versionin.claude/.bootstrap.json.
Safety Rules
- NEVER overwrite
USER_PROFILE.json. - NEVER overwrite a customized
CLAUDE.mdorSESSION_STATE.mdwithout explicit confirmation. - ALWAYS show what will change before applying, and back up before replacing.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: shivae372
- Source: shivae372/claude-bootstrap
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.