check-version

37 / 100 · High risk

Only if you trust the author.

By b-open-io/prompts (GitHub) · other · 15 stars · scanned at commit f4b302a

Compare installed plugin versions against GitHub to confirm skills and agents are current. Use at session start, for "is everything up to date", "are my plugins up to date", "are our plugins current", "check for plugin updates", "is anything stale", "am I on the latest version", "did that plugin update land", or when a skill behaves differently than documented or references features you do not recognize. Checks any plugin in the marketplace, not just core. Completes in under 100ms per plugin.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. It runs automatically when the plugin is installed.

Found in 33 places.

skills/check-version/SKILL.md, line 22bash <skill-path>/scripts/check-version.sh
hooks/claude-hooks.json, line 9"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/session-context.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.cl
hooks/claude-hooks.json, line 14"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/repo-freshness.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.cla

Show 17 more

hooks/claude-hooks.json, line 25"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/prompt-router.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.clau
hooks/claude-hooks.json, line 37"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/pretooluse-bash.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.cl
hooks/claude-hooks.json, line 47"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/damage-control.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.cla
hooks/claude-hooks.json, line 57"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/agent-browser-solo.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/
hooks/claude-hooks.json, line 67"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/roster-guard.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.claud
hooks/claude-hooks.json, line 77"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/skill-activity.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.cla
hooks/claude-hooks.json, line 89"command": "BOPEN_HOOK_SCRIPT=\"${CLAUDE_PLUGIN_ROOT}/hooks/hammertime.py\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.claude/
hooks/codex-hooks.json, line 9"command": "BOPEN_HOOK_SCRIPT=\"${PLUGIN_ROOT}/hooks/session-context.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.codex/plu
hooks/codex-hooks.json, line 14"command": "BOPEN_HOOK_SCRIPT=\"${PLUGIN_ROOT}/hooks/repo-freshness.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.codex/plug
hooks/codex-hooks.json, line 25"command": "BOPEN_HOOK_SCRIPT=\"${PLUGIN_ROOT}/hooks/browser-intent.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.codex/plug
hooks/codex-hooks.json, line 37"command": "BOPEN_HOOK_SCRIPT=\"${PLUGIN_ROOT}/hooks/pretooluse-bash.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.codex/plu
hooks/codex-hooks.json, line 47"command": "BOPEN_HOOK_SCRIPT=\"${PLUGIN_ROOT}/hooks/damage-control.sh\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.codex/plug
hooks/codex-hooks.json, line 58"command": "BOPEN_HOOK_SCRIPT=\"${PLUGIN_ROOT}/hooks/hammertime.py\"; if [ ! -f \"$BOPEN_HOOK_SCRIPT\" ]; then BOPEN_HOOK_SCRIPT=$(ls -t \"$HOME/.codex/plugins/
hooks/hammertime.py, line 619subprocess.Popen(
hooks/hammertime.py, line 621stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL,
hooks/hammertime.py, line 648result = subprocess.run(
hooks/hammertime.py, line 656result = subprocess.run(

and 13 more places

Sends data to these websites: example.com

This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed.

Found in 21 places.

skills/check-version/scripts/check-version.sh, line 48marketplace_json=$(curl -sf --max-time 3 \
skills/check-version/scripts/check-version.sh, line 85remote_json=$(curl -sf --max-time 3 "$manifest_url" 2>/dev/null || echo "")
hooks/agent-browser-solo.sh, line 93echo "agent-browser not installed; WebFetch proceeding. For JS-rendered pages: npm install -g agent-browser"

Show 17 more

hooks/agent-browser-solo.sh, line 145reason="WebFetch handled by agent-browser (faster, JS-rendered) — ${#page_text} bytes of page content delivered in context; no retry needed."
hooks/agent-browser-solo.sh, line 147ctx="Page content for ${url}, fetched via agent-browser (WebFetch was skipped — do not retry it; this content is complete).
hooks/claude-hooks.json, line 53"matcher": "WebFetch",
hooks/hammertime.py, line 63import urllib.request
hooks/hammertime.py, line 475req = urllib.request.Request(
hooks/hammertime.py, line 487with urllib.request.urlopen(req, timeout=10) as resp:
hooks/manifest.json, line 9"matcher": "WebFetch",
hooks/manifest.json, line 12"summary": "Services WebFetch through a real browser instead of plain HTTP.",
hooks/manifest.json, line 13"description": "Intercepts WebFetch and fetches the page with agent-browser (headless Chrome) in an isolated session, delivering JS-rendered extracted text to t
hooks/manifest.json, line 83"description": "Detects prompts that involve browser work (URLs, navigation, form filling, login, screenshots, SPAs) and injects static guidance preferring agen
hooks/tests/test_agent_browser_solo.sh, line 42fetch_input=$(jq -n '{tool_name:"WebFetch", tool_input:{url:"https://example.com/docs"}}')
hooks/tests/test_agent_browser_solo.sh, line 66search_input=$(jq -n '{tool_name:"WebSearch", tool_input:{query:"anything"}}')
hooks/tests/test_validate.sh, line 87if jq -r '.. | strings? // empty' "$ROOT/claude-hooks.json" | grep -q WebFetch; then
hooks/tests/test_validate.sh, line 88PASS=$((PASS + 1)); printf ' PASS claude WebFetch matcher present\n'
hooks/tests/test_validate.sh, line 90FAIL=$((FAIL + 1)); failures+=("claude missing WebFetch"); printf ' FAIL claude WebFetch\n'
hooks/tests/test_validate.sh, line 93if jq -r '.. | strings? // empty' "$ROOT/claude-hooks.json" | grep -q WebSearch; then
hooks/tests/test_validate.sh, line 94FAIL=$((FAIL + 1)); failures+=("claude still matches WebSearch"); printf ' FAIL claude should not intercept WebSearch\n'

and 1 more places

Downloads and installs other software

The author does not mention this. It runs automatically when the plugin is installed.

Found in 3 places.

hooks/agent-browser-solo.sh, line 93echo "agent-browser not installed; WebFetch proceeding. For JS-rendered pages: npm install -g agent-browser"
hooks/browser-intent.sh, line 86npm install -g agent-browser
hooks/tests/test_agent_browser_solo.sh, line 81assert_contains "ab-solo missing hint" "npm install -g agent-browser" "$HOOK_STDOUT"

Can call paid AI services billed to you

The author does not mention this. It runs automatically when the plugin is installed.

Found in 1 place.

hooks/hammertime.py, line 476"https://api.anthropic.com/v1/messages",

Changes files outside its own folder

The author does not mention this. It runs automatically when the plugin is installed.

Found in 7 places.

hooks/hammertime.py, line 637with open(os.path.expanduser(debug_path), "a") as f:
hooks/tests/test_damage_control.sh, line 86input=$(jq -n '{tool_name:"Bash", tool_input:{command:"rm /tmp/x && cat ~/.claude/plugins/foo"}}')
hooks/tests/test_damage_control.sh, line 92input=$(jq -n '{tool_name:"Bash", tool_input:{command:"rm -rf ~/.claude"}}')

Show 4 more

hooks/tests/test_damage_control.sh, line 99input=$(jq -n '{tool_name:"Bash", tool_input:{command:"rm ~/.claude/settings.json"}}')
hooks/tests/test_pretooluse_bash.sh, line 33input=$(jq -n '{tool_name:"Bash", tool_input:{command:"rm /tmp/x && cat ~/.claude/plugins/foo"}}')
hooks/tests/test_pretooluse_bash.sh, line 39input=$(jq -n '{tool_name:"Bash", tool_input:{command:"rm -rf ~/.claude"}}')
hooks/tests/test_skill_activity.sh, line 17mkdir -p "$HOME"

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this. It runs automatically when the plugin is installed.

Found in 2 places.

hooks/patterns.yaml, line 15- "~/.ssh/"
hooks/patterns.yaml, line 16- "~/.aws/"

Safer alternatives

Low-risk skills in the same category (other) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'check-version' ] || [ -L ~/.agents/skills/'check-version' ]; then echo 'A skill folder named check-version already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/b-open-io/prompts' "$d" && git -C "$d" checkout --quiet 'f4b302aadb0c99023b03e1f1b38ffed3697fbedf' -- 'skills/check-version' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/check-version' ~/.agents/skills/'check-version' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'check-version' ~/.claude/skills/'check-version' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for b-open-io/prompts shows the score of its lowest-scoring skill.

SkillTrust badge for b-open-io/prompts

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/b-open-io/prompts.svg)](https://zalavijaysinh.github.io/skilltrust/repos/b-open-io/prompts/)

Score history

Date	Version	Score
2026-11-08	`f4b302a`	37
2026-11-06	`f4b302a`	37