Install
$ agentstack add skill-works-on-your-machine-womm-skills-upstream-sync ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Upstream Sync
Selectively pull upstream changes into a forked WOMM Skills repo without blowing away customizations. Git's merge tools operate on lines — this skill operates on meaning.
This skill operates on ~/.womm-skills/, not the user's current project.
Conventions
Everything is discoverable — no config file needed:
- Repo location:
~/.womm-skills/ - Upstream remote:
upstream(standard git convention for forks) - Sync marker:
.womm-upstream-syncin repo root — contains the SHA of the last upstream commit synced - Golden specs:
~/.womm-skills/golden-specs/(read directly, not cached) - Skills:
~/.womm-skills/skills/(cached by plugin — reinstall after sync if skills changed)
Workflow
1. Check Prerequisites
- Verify
~/.womm-skills/exists and is a git repo (look for.claude-plugin/marketplace.json) - Check if
upstreamremote exists. If not, help the user add it:
`` cd ~/.womm-skills git remote add upstream https://github.com/works-on-your-machine/womm-skills ``
- Run
git fetch upstream
2. Find the Baseline
- Read
.womm-upstream-syncfor the last-synced commit SHA - If the file doesn't exist (first sync), find the original fork point:
`` git merge-base upstream/main HEAD ``
3. Discover Upstream Changes
Run git diff --name-status ..upstream/main and categorize each change:
- New skills — new directories in
skills/ - Modified skills — changes to existing
skills/*/SKILL.mdorskills/*/references/* - New golden specs — new files in
golden-specs/ - Modified golden specs — changes to existing files in
golden-specs/ - Config/docs changes —
marketplace.json,README.md,CLAUDE.md, etc. - Other — anything else
4. Discover Local Changes
Run git diff ..HEAD --name-only to see what the user has modified. Flag any files changed both upstream AND locally — these are potential conflicts.
5. Present Changes
Group by category. For each change show:
- What changed (brief summary)
- Whether the user also modified this file (conflict risk)
Recommend:
- New files (no conflict): Pull in automatically
- Files only changed upstream: Pull in automatically
- Conflicting files: Show both sides, explain what each changed, ask the user to decide
6. Apply Selected Changes
- New or non-conflicting files:
git checkout upstream/main -- path/to/file - Conflicting files: Either take upstream version, keep local version, or help the user merge manually
- Stage and commit the sync
7. Update the Sync Marker
Write current upstream/main SHA to .womm-upstream-sync. Include in the sync commit.
8. Remind About Plugin Reinstall
- If skills changed: Tell the user to run
claude plugin install womm-skills@womm-skills - If only golden specs changed: No reinstall needed — golden specs are read directly from disk
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: works-on-your-machine
- Source: works-on-your-machine/womm-skills
- License: MIT
- Homepage: https://skills.worksonmymachine.ai
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.