skills 1.4.8 → 1.5.0

package/README.md

@@ -3,7 +3,9 @@
 The CLI for the open agent skills ecosystem.
 
 <!-- agent-list:start -->
+
 Supports **OpenCode**, **Claude Code**, **Codex**, **Cursor**, and [41 more](#available-agents).
+
 <!-- agent-list:end -->
 
 ## Install a Skill
@@ -92,14 +94,13 @@ When installing interactively, you can choose:
 
 ## Other Commands
 
-| Command                      | Description                                    |
-| ---------------------------- | ---------------------------------------------- |
-| `npx skills list`            | List installed skills (alias: `ls`)            |
-| `npx skills find [query]`    | Search for skills interactively or by keyword  |
-| `npx skills remove [skills]` | Remove installed skills from agents            |
-| `npx skills check`           | Check for available skill updates              |
-| `npx skills update`          | Update all installed skills to latest versions |
-| `npx skills init [name]`     | Create a new SKILL.md template                 |
+| Command                      | Description                                   |
+| ---------------------------- | --------------------------------------------- |
+| `npx skills list`            | List installed skills (alias: `ls`)           |
+| `npx skills find [query]`    | Search for skills interactively or by keyword |
+| `npx skills remove [skills]` | Remove installed skills from agents           |
+| `npx skills update [skills]` | Update installed skills to latest versions    |
+| `npx skills init [name]`     | Create a new SKILL.md template                |
 
 ### `skills list`
 
@@ -128,16 +129,33 @@ npx skills find
 npx skills find typescript
 ```
 
-### `skills check` / `skills update`
+### `skills update`
 
 ```bash
-# Check if any installed skills have updates
-npx skills check
-
-# Update all skills to latest versions
+# Update all skills (interactive scope prompt)
 npx skills update
+
+# Update a single skill by name
+npx skills update my-skill
+
+# Update multiple specific skills
+npx skills update frontend-design web-design-guidelines
+
+# Update only global or project skills
+npx skills update -g
+npx skills update -p
+
+# Non-interactive (auto-detects scope: project if in a project, else global)
+npx skills update -y
 ```
 
+| Option          | Description                                                               |
+| --------------- | ------------------------------------------------------------------------- |
+| `-g, --global`  | Only update global skills                                                 |
+| `-p, --project` | Only update project skills                                                |
+| `-y, --yes`     | Skip scope prompt (auto-detect: project if in a project dir, else global) |
+| `[skills...]`   | Update specific skills by name instead of all                             |
+
 ### `skills init`
 
 ```bash
@@ -207,49 +225,51 @@ Discover skills at **[skills.sh](https://skills.sh)**
 Skills can be installed to any of these agents:
 
 <!-- supported-agents:start -->
-| Agent | `--agent` | Project Path | Global Path |
-|-------|-----------|--------------|-------------|
-| Amp, Kimi Code CLI, Replit, Universal | `amp`, `kimi-cli`, `replit`, `universal` | `.agents/skills/` | `~/.config/agents/skills/` |
-| Antigravity | `antigravity` | `.agents/skills/` | `~/.gemini/antigravity/skills/` |
-| Augment | `augment` | `.augment/skills/` | `~/.augment/skills/` |
-| IBM Bob | `bob` | `.bob/skills/` | `~/.bob/skills/` |
-| Claude Code | `claude-code` | `.claude/skills/` | `~/.claude/skills/` |
-| OpenClaw | `openclaw` | `skills/` | `~/.openclaw/skills/` |
-| Cline, Warp | `cline`, `warp` | `.agents/skills/` | `~/.agents/skills/` |
-| CodeBuddy | `codebuddy` | `.codebuddy/skills/` | `~/.codebuddy/skills/` |
-| Codex | `codex` | `.agents/skills/` | `~/.codex/skills/` |
-| Command Code | `command-code` | `.commandcode/skills/` | `~/.commandcode/skills/` |
-| Continue | `continue` | `.continue/skills/` | `~/.continue/skills/` |
-| Cortex Code | `cortex` | `.cortex/skills/` | `~/.snowflake/cortex/skills/` |
-| Crush | `crush` | `.crush/skills/` | `~/.config/crush/skills/` |
-| Cursor | `cursor` | `.agents/skills/` | `~/.cursor/skills/` |
-| Deep Agents | `deepagents` | `.agents/skills/` | `~/.deepagents/agent/skills/` |
-| Droid | `droid` | `.factory/skills/` | `~/.factory/skills/` |
-| Firebender | `firebender` | `.agents/skills/` | `~/.firebender/skills/` |
-| Gemini CLI | `gemini-cli` | `.agents/skills/` | `~/.gemini/skills/` |
-| GitHub Copilot | `github-copilot` | `.agents/skills/` | `~/.copilot/skills/` |
-| Goose | `goose` | `.goose/skills/` | `~/.config/goose/skills/` |
-| Junie | `junie` | `.junie/skills/` | `~/.junie/skills/` |
-| iFlow CLI | `iflow-cli` | `.iflow/skills/` | `~/.iflow/skills/` |
-| Kilo Code | `kilo` | `.kilocode/skills/` | `~/.kilocode/skills/` |
-| Kiro CLI | `kiro-cli` | `.kiro/skills/` | `~/.kiro/skills/` |
-| Kode | `kode` | `.kode/skills/` | `~/.kode/skills/` |
-| MCPJam | `mcpjam` | `.mcpjam/skills/` | `~/.mcpjam/skills/` |
-| Mistral Vibe | `mistral-vibe` | `.vibe/skills/` | `~/.vibe/skills/` |
-| Mux | `mux` | `.mux/skills/` | `~/.mux/skills/` |
-| OpenCode | `opencode` | `.agents/skills/` | `~/.config/opencode/skills/` |
-| OpenHands | `openhands` | `.openhands/skills/` | `~/.openhands/skills/` |
-| Pi | `pi` | `.pi/skills/` | `~/.pi/agent/skills/` |
-| Qoder | `qoder` | `.qoder/skills/` | `~/.qoder/skills/` |
-| Qwen Code | `qwen-code` | `.qwen/skills/` | `~/.qwen/skills/` |
-| Roo Code | `roo` | `.roo/skills/` | `~/.roo/skills/` |
-| Trae | `trae` | `.trae/skills/` | `~/.trae/skills/` |
-| Trae CN | `trae-cn` | `.trae/skills/` | `~/.trae-cn/skills/` |
-| Windsurf | `windsurf` | `.windsurf/skills/` | `~/.codeium/windsurf/skills/` |
-| Zencoder | `zencoder` | `.zencoder/skills/` | `~/.zencoder/skills/` |
-| Neovate | `neovate` | `.neovate/skills/` | `~/.neovate/skills/` |
-| Pochi | `pochi` | `.pochi/skills/` | `~/.pochi/skills/` |
-| AdaL | `adal` | `.adal/skills/` | `~/.adal/skills/` |
+
+| Agent                                 | `--agent`                                | Project Path           | Global Path                     |
+| ------------------------------------- | ---------------------------------------- | ---------------------- | ------------------------------- |
+| Amp, Kimi Code CLI, Replit, Universal | `amp`, `kimi-cli`, `replit`, `universal` | `.agents/skills/`      | `~/.config/agents/skills/`      |
+| Antigravity                           | `antigravity`                            | `.agents/skills/`      | `~/.gemini/antigravity/skills/` |
+| Augment                               | `augment`                                | `.augment/skills/`     | `~/.augment/skills/`            |
+| IBM Bob                               | `bob`                                    | `.bob/skills/`         | `~/.bob/skills/`                |
+| Claude Code                           | `claude-code`                            | `.claude/skills/`      | `~/.claude/skills/`             |
+| OpenClaw                              | `openclaw`                               | `skills/`              | `~/.openclaw/skills/`           |
+| Cline, Warp                           | `cline`, `warp`                          | `.agents/skills/`      | `~/.agents/skills/`             |
+| CodeBuddy                             | `codebuddy`                              | `.codebuddy/skills/`   | `~/.codebuddy/skills/`          |
+| Codex                                 | `codex`                                  | `.agents/skills/`      | `~/.codex/skills/`              |
+| Command Code                          | `command-code`                           | `.commandcode/skills/` | `~/.commandcode/skills/`        |
+| Continue                              | `continue`                               | `.continue/skills/`    | `~/.continue/skills/`           |
+| Cortex Code                           | `cortex`                                 | `.cortex/skills/`      | `~/.snowflake/cortex/skills/`   |
+| Crush                                 | `crush`                                  | `.crush/skills/`       | `~/.config/crush/skills/`       |
+| Cursor                                | `cursor`                                 | `.agents/skills/`      | `~/.cursor/skills/`             |
+| Deep Agents                           | `deepagents`                             | `.agents/skills/`      | `~/.deepagents/agent/skills/`   |
+| Droid                                 | `droid`                                  | `.factory/skills/`     | `~/.factory/skills/`            |
+| Firebender                            | `firebender`                             | `.agents/skills/`      | `~/.firebender/skills/`         |
+| Gemini CLI                            | `gemini-cli`                             | `.agents/skills/`      | `~/.gemini/skills/`             |
+| GitHub Copilot                        | `github-copilot`                         | `.agents/skills/`      | `~/.copilot/skills/`            |
+| Goose                                 | `goose`                                  | `.goose/skills/`       | `~/.config/goose/skills/`       |
+| Junie                                 | `junie`                                  | `.junie/skills/`       | `~/.junie/skills/`              |
+| iFlow CLI                             | `iflow-cli`                              | `.iflow/skills/`       | `~/.iflow/skills/`              |
+| Kilo Code                             | `kilo`                                   | `.kilocode/skills/`    | `~/.kilocode/skills/`           |
+| Kiro CLI                              | `kiro-cli`                               | `.kiro/skills/`        | `~/.kiro/skills/`               |
+| Kode                                  | `kode`                                   | `.kode/skills/`        | `~/.kode/skills/`               |
+| MCPJam                                | `mcpjam`                                 | `.mcpjam/skills/`      | `~/.mcpjam/skills/`             |
+| Mistral Vibe                          | `mistral-vibe`                           | `.vibe/skills/`        | `~/.vibe/skills/`               |
+| Mux                                   | `mux`                                    | `.mux/skills/`         | `~/.mux/skills/`                |
+| OpenCode                              | `opencode`                               | `.agents/skills/`      | `~/.config/opencode/skills/`    |
+| OpenHands                             | `openhands`                              | `.openhands/skills/`   | `~/.openhands/skills/`          |
+| Pi                                    | `pi`                                     | `.pi/skills/`          | `~/.pi/agent/skills/`           |
+| Qoder                                 | `qoder`                                  | `.qoder/skills/`       | `~/.qoder/skills/`              |
+| Qwen Code                             | `qwen-code`                              | `.qwen/skills/`        | `~/.qwen/skills/`               |
+| Roo Code                              | `roo`                                    | `.roo/skills/`         | `~/.roo/skills/`                |
+| Trae                                  | `trae`                                   | `.trae/skills/`        | `~/.trae/skills/`               |
+| Trae CN                               | `trae-cn`                                | `.trae/skills/`        | `~/.trae-cn/skills/`            |
+| Windsurf                              | `windsurf`                               | `.windsurf/skills/`    | `~/.codeium/windsurf/skills/`   |
+| Zencoder                              | `zencoder`                               | `.zencoder/skills/`    | `~/.zencoder/skills/`           |
+| Neovate                               | `neovate`                                | `.neovate/skills/`     | `~/.neovate/skills/`            |
+| Pochi                                 | `pochi`                                  | `.pochi/skills/`       | `~/.pochi/skills/`              |
+| AdaL                                  | `adal`                                   | `.adal/skills/`        | `~/.adal/skills/`               |
+
 <!-- supported-agents:end -->
 
 > [!NOTE]
@@ -314,6 +334,7 @@ metadata:
 The CLI searches for skills in these locations within a repository:
 
 <!-- skill-discovery:start -->
+
 - Root directory (if it contains `SKILL.md`)
 - `skills/`
 - `skills/.curated/`

package/dist/cli.mjs

@@ -7,7 +7,7 @@ import "./_chunks/libs/@kwsites/promise-deferred.mjs";
 import { t as esm_default } from "./_chunks/libs/simple-git.mjs";
 import { t as xdgConfig } from "./_chunks/libs/xdg-basedir.mjs";
 import { execSync, spawnSync } from "child_process";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
 import { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
 import { homedir, platform, tmpdir } from "os";
 import { fileURLToPath } from "url";
@@ -2164,7 +2164,7 @@ async function tryBlobInstall(ownerRepo, options = {}) {
 		tree
 	};
 }
-var version$1 = "1.4.8";
+var version$1 = "1.5.0";
 const isCancelled$1 = (value) => typeof value === "symbol";
 async function isSourcePrivate(source) {
 	const ownerRepo = parseOwnerRepo(source);
@@ -2645,6 +2645,16 @@ async function runAdd(args, options = {}) {
 		spinner.start("Parsing source...");
 		const parsed = parseSource(source);
 		spinner.stop(`Source: ${parsed.type === "local" ? parsed.localPath : parsed.url}${parsed.ref ? ` @ ${import_picocolors.default.yellow(parsed.ref)}` : ""}${parsed.subpath ? ` (${parsed.subpath})` : ""}${parsed.skillFilter ? ` ${import_picocolors.default.dim("@")}${import_picocolors.default.cyan(parsed.skillFilter)}` : ""}`);
+		if (getOwnerRepo(parsed)?.split("/")[0]?.toLowerCase() === "openclaw" && !options.dangerouslyAcceptOpenclawRisks) {
+			console.log();
+			M.warn(import_picocolors.default.yellow(import_picocolors.default.bold("⚠ OpenClaw skills are unverified community submissions.")));
+			M.message(import_picocolors.default.yellow("This source contains user-submitted skills that have not been reviewed for safety or quality."));
+			M.message(import_picocolors.default.yellow("Skills run with full agent permissions and could be malicious."));
+			console.log();
+			M.message(`If you understand the risks, re-run with:\n\n  ${import_picocolors.default.cyan(`npx skills add ${source} --dangerously-accept-openclaw-risks`)}\n`);
+			Se(import_picocolors.default.red("Installation blocked"));
+			process.exit(1);
+		}
 		if (parsed.type === "well-known") {
 			await handleWellKnownSkills(source, parsed.url, options, spinner);
 			return;
@@ -3222,6 +3232,7 @@ function parseAddOptions(args) {
 			i--;
 		} else if (arg === "--full-depth") options.fullDepth = true;
 		else if (arg === "--copy") options.copy = true;
+		else if (arg === "--dangerously-accept-openclaw-risks") options.dangerouslyAcceptOpenclawRisks = true;
 		else if (arg && !arg.startsWith("-")) source.push(arg);
 	}
 	return {
@@ -4100,6 +4111,9 @@ function buildUpdateInstallSource(entry) {
 	if (entry.ref) installSource = `${installSource}#${entry.ref}`;
 	return installSource;
 }
+function buildLocalUpdateSource(entry) {
+	return formatSourceInput(entry.source, entry.ref);
+}
 const __dirname = dirname(fileURLToPath(import.meta.url));
 function getVersion() {
 	try {
@@ -4147,8 +4161,7 @@ function showBanner() {
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills list${RESET}                 ${DIM}List installed skills${RESET}`);
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills find ${DIM}[query]${RESET}         ${DIM}Search for skills${RESET}`);
 	console.log();
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills check${RESET}                ${DIM}Check for updates${RESET}`);
-	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills update${RESET}               ${DIM}Update all skills${RESET}`);
+	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills update${RESET}               ${DIM}Update installed skills${RESET}`);
 	console.log();
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills experimental_install${RESET} ${DIM}Restore from skills-lock.json${RESET}`);
 	console.log(`  ${DIM}$${RESET} ${TEXT}npx skills init ${DIM}[name]${RESET}          ${DIM}Create a new skill${RESET}`);
@@ -4172,8 +4185,12 @@ ${BOLD}Manage Skills:${RESET}
   find [query]         Search for skills interactively
 
 ${BOLD}Updates:${RESET}
-  check                Check for available skill updates
-  update               Update all skills to latest versions
+  update [skills...]   Update skills to latest versions (alias: upgrade)
+
+${BOLD}Update Options:${RESET}
+  -g, --global           Update global skills only
+  -p, --project          Update project skills only
+  -y, --yes              Skip scope prompt (auto-detect: project if in a project, else global)
 
 ${BOLD}Project:${RESET}
   experimental_install Restore skills from skills-lock.json
@@ -4224,8 +4241,9 @@ ${BOLD}Examples:${RESET}
   ${DIM}$${RESET} skills ls --json                      ${DIM}# JSON output${RESET}
   ${DIM}$${RESET} skills find                          ${DIM}# interactive search${RESET}
   ${DIM}$${RESET} skills find typescript               ${DIM}# search by keyword${RESET}
-  ${DIM}$${RESET} skills check
   ${DIM}$${RESET} skills update
+  ${DIM}$${RESET} skills update my-skill             ${DIM}# update a single skill${RESET}
+  ${DIM}$${RESET} skills update -g                    ${DIM}# update global skills only${RESET}
   ${DIM}$${RESET} skills experimental_install            ${DIM}# restore from skills-lock.json${RESET}
   ${DIM}$${RESET} skills init my-skill
   ${DIM}$${RESET} skills experimental_sync              ${DIM}# sync from node_modules${RESET}
@@ -4340,127 +4358,144 @@ function readSkillLock() {
 		};
 	}
 }
+function parseUpdateOptions(args) {
+	const options = {};
+	const positional = [];
+	for (const arg of args) if (arg === "-g" || arg === "--global") options.global = true;
+	else if (arg === "-p" || arg === "--project") options.project = true;
+	else if (arg === "-y" || arg === "--yes") options.yes = true;
+	else if (!arg.startsWith("-")) positional.push(arg);
+	if (positional.length > 0) options.skills = positional;
+	return options;
+}
+function hasProjectSkills(cwd) {
+	const dir = cwd || process.cwd();
+	if (existsSync(join(dir, "skills-lock.json"))) return true;
+	const skillsDir = join(dir, ".agents", "skills");
+	try {
+		const entries = readdirSync(skillsDir, { withFileTypes: true });
+		for (const entry of entries) if (entry.isDirectory()) {
+			if (existsSync(join(skillsDir, entry.name, "SKILL.md"))) return true;
+		}
+	} catch {}
+	return false;
+}
+async function resolveUpdateScope(options) {
+	if (options.skills && options.skills.length > 0) {
+		if (options.global) return "global";
+		if (options.project) return "project";
+		return "both";
+	}
+	if (options.global && options.project) return "both";
+	if (options.global) return "global";
+	if (options.project) return "project";
+	if (options.yes || !process.stdin.isTTY) return hasProjectSkills() ? "project" : "global";
+	const scope = await ve({
+		message: "Update scope",
+		options: [
+			{
+				value: "project",
+				label: "Project",
+				hint: "Update skills in current directory"
+			},
+			{
+				value: "global",
+				label: "Global",
+				hint: "Update skills in home directory"
+			},
+			{
+				value: "both",
+				label: "Both",
+				hint: "Update all skills"
+			}
+		]
+	});
+	if (pD(scope)) {
+		xe("Cancelled");
+		process.exit(0);
+	}
+	return scope;
+}
+function matchesSkillFilter(name, filter) {
+	if (!filter || filter.length === 0) return true;
+	const lower = name.toLowerCase();
+	return filter.some((f) => f.toLowerCase() === lower);
+}
 function getSkipReason(entry) {
 	if (entry.sourceType === "local") return "Local path";
-	if (entry.sourceType === "git") return "Git URL (hash tracking not supported)";
-	if (!entry.skillFolderHash) return "No version hash available";
+	if (entry.sourceType === "git") return "Git URL";
+	if (entry.sourceType === "well-known") return "Well-known skill";
+	if (!entry.skillFolderHash) return "Private or deleted repo";
 	if (!entry.skillPath) return "No skill path recorded";
 	return "No version tracking";
 }
+function getInstallSource(skill) {
+	let url = skill.sourceUrl;
+	if (skill.sourceType === "well-known") {
+		const idx = url.indexOf("/.well-known/");
+		if (idx !== -1) url = url.slice(0, idx);
+	}
+	return formatSourceInput(url, skill.ref);
+}
 function printSkippedSkills(skipped) {
 	if (skipped.length === 0) return;
 	console.log();
 	console.log(`${DIM}${skipped.length} skill(s) cannot be checked automatically:${RESET}`);
+	const grouped = /* @__PURE__ */ new Map();
 	for (const skill of skipped) {
-		console.log(`  ${TEXT}•${RESET} ${skill.name} ${DIM}(${skill.reason})${RESET}`);
-		console.log(`    ${DIM}To update: ${TEXT}npx skills add ${formatSourceInput(skill.sourceUrl, skill.ref)} -g -y${RESET}`);
-	}
-}
-async function runCheck(args = []) {
-	console.log(`${TEXT}Checking for skill updates...${RESET}`);
-	console.log();
-	const lock = readSkillLock();
-	const skillNames = Object.keys(lock.skills);
-	if (skillNames.length === 0) {
-		console.log(`${DIM}No skills tracked in lock file.${RESET}`);
-		console.log(`${DIM}Install skills with${RESET} ${TEXT}npx skills add <package>${RESET}`);
-		return;
-	}
-	const token = getGitHubToken();
-	const skillsBySource = /* @__PURE__ */ new Map();
-	const skipped = [];
-	for (const skillName of skillNames) {
-		const entry = lock.skills[skillName];
-		if (!entry) continue;
-		if (!entry.skillFolderHash || !entry.skillPath) {
-			skipped.push({
-				name: skillName,
-				reason: getSkipReason(entry),
-				sourceUrl: entry.sourceUrl,
-				ref: entry.ref
-			});
-			continue;
+		const source = getInstallSource(skill);
+		const existing = grouped.get(source) || [];
+		existing.push(skill);
+		grouped.set(source, existing);
+	}
+	for (const [source, skills] of grouped) {
+		if (skills.length === 1) {
+			const skill = skills[0];
+			console.log(`  ${TEXT}•${RESET} ${skill.name} ${DIM}(${skill.reason})${RESET}`);
+		} else {
+			const reason = skills[0].reason;
+			const names = skills.map((s) => s.name).join(", ");
+			console.log(`  ${TEXT}•${RESET} ${names} ${DIM}(${reason})${RESET}`);
 		}
-		const existing = skillsBySource.get(entry.source) || [];
-		existing.push({
-			name: skillName,
-			entry
-		});
-		skillsBySource.set(entry.source, existing);
+		console.log(`    ${DIM}To update: ${TEXT}npx skills add ${source} -g -y${RESET}`);
 	}
-	const totalSkills = skillNames.length - skipped.length;
-	if (totalSkills === 0) {
-		console.log(`${DIM}No GitHub skills to check.${RESET}`);
-		printSkippedSkills(skipped);
-		return;
-	}
-	console.log(`${DIM}Checking ${totalSkills} skill(s) for updates...${RESET}`);
-	const updates = [];
-	const errors = [];
-	for (const [source, skills] of skillsBySource) for (const { name, entry } of skills) try {
-		const latestHash = await fetchSkillFolderHash(source, entry.skillPath, token, entry.ref);
-		if (!latestHash) {
-			errors.push({
-				name,
-				source,
-				error: "Could not fetch from GitHub"
-			});
-			continue;
-		}
-		if (latestHash !== entry.skillFolderHash) updates.push({
-			name,
-			source
-		});
-	} catch (err) {
-		errors.push({
+}
+async function getProjectSkillsForUpdate(skillFilter) {
+	const localLock = await readLocalLock();
+	const skills = [];
+	for (const [name, entry] of Object.entries(localLock.skills)) {
+		if (!matchesSkillFilter(name, skillFilter)) continue;
+		if (entry.sourceType === "node_modules" || entry.sourceType === "local") continue;
+		skills.push({
 			name,
-			source,
-			error: err instanceof Error ? err.message : "Unknown error"
+			source: entry.source,
+			entry
 		});
 	}
-	console.log();
-	if (updates.length === 0) console.log(`${TEXT}✓ All skills are up to date${RESET}`);
-	else {
-		console.log(`${TEXT}${updates.length} update(s) available:${RESET}`);
-		console.log();
-		for (const update of updates) {
-			console.log(`  ${TEXT}↑${RESET} ${update.name}`);
-			console.log(`    ${DIM}source: ${update.source}${RESET}`);
-		}
-		console.log();
-		console.log(`${DIM}Run${RESET} ${TEXT}npx skills update${RESET} ${DIM}to update all skills${RESET}`);
-	}
-	if (errors.length > 0) {
-		console.log();
-		console.log(`${DIM}Could not check ${errors.length} skill(s) (may need reinstall)${RESET}`);
-		console.log();
-		for (const error of errors) {
-			console.log(`  ${DIM}✗${RESET} ${error.name}`);
-			console.log(`    ${DIM}source: ${error.source}${RESET}`);
-		}
-	}
-	printSkippedSkills(skipped);
-	track({
-		event: "check",
-		skillCount: String(totalSkills),
-		updatesAvailable: String(updates.length)
-	});
-	console.log();
+	return skills;
 }
-async function runUpdate() {
-	console.log(`${TEXT}Checking for skill updates...${RESET}`);
-	console.log();
+async function updateGlobalSkills(skillFilter) {
 	const lock = readSkillLock();
 	const skillNames = Object.keys(lock.skills);
+	let successCount = 0;
+	let failCount = 0;
 	if (skillNames.length === 0) {
-		console.log(`${DIM}No skills tracked in lock file.${RESET}`);
-		console.log(`${DIM}Install skills with${RESET} ${TEXT}npx skills add <package>${RESET}`);
-		return;
+		if (!skillFilter) {
+			console.log(`${DIM}No global skills tracked in lock file.${RESET}`);
+			console.log(`${DIM}Install skills with${RESET} ${TEXT}npx skills add <package> -g${RESET}`);
+		}
+		return {
+			successCount,
+			failCount,
+			checkedCount: 0
+		};
 	}
 	const token = getGitHubToken();
 	const updates = [];
 	const skipped = [];
+	const checkable = [];
 	for (const skillName of skillNames) {
+		if (!matchesSkillFilter(skillName, skillFilter)) continue;
 		const entry = lock.skills[skillName];
 		if (!entry) continue;
 		if (!entry.skillFolderHash || !entry.skillPath) {
@@ -4468,10 +4503,19 @@ async function runUpdate() {
 				name: skillName,
 				reason: getSkipReason(entry),
 				sourceUrl: entry.sourceUrl,
+				sourceType: entry.sourceType,
 				ref: entry.ref
 			});
 			continue;
 		}
+		checkable.push({
+			name: skillName,
+			entry
+		});
+	}
+	for (let i = 0; i < checkable.length; i++) {
+		const { name: skillName, entry } = checkable[i];
+		process.stdout.write(`\r${DIM}Checking global skill ${i + 1}/${checkable.length}: ${skillName}${RESET}\x1b[K`);
 		try {
 			const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath, token, entry.ref);
 			if (latestHash && latestHash !== entry.skillFolderHash) updates.push({
@@ -4481,20 +4525,34 @@ async function runUpdate() {
 			});
 		} catch {}
 	}
-	if (skillNames.length - skipped.length === 0) {
-		console.log(`${DIM}No skills to check.${RESET}`);
+	if (checkable.length > 0) process.stdout.write("\r\x1B[K");
+	const checkedCount = checkable.length + skipped.length;
+	if (checkable.length === 0 && skipped.length === 0) {
+		if (!skillFilter) console.log(`${DIM}No global skills to check.${RESET}`);
+		return {
+			successCount,
+			failCount,
+			checkedCount: 0
+		};
+	}
+	if (checkable.length === 0 && skipped.length > 0) {
 		printSkippedSkills(skipped);
-		return;
+		return {
+			successCount,
+			failCount,
+			checkedCount
+		};
 	}
 	if (updates.length === 0) {
-		console.log(`${TEXT}✓ All skills are up to date${RESET}`);
-		console.log();
-		return;
+		console.log(`${TEXT}✓ All global skills are up to date${RESET}`);
+		return {
+			successCount,
+			failCount,
+			checkedCount
+		};
 	}
-	console.log(`${TEXT}Found ${updates.length} update(s)${RESET}`);
+	console.log(`${TEXT}Found ${updates.length} global update(s)${RESET}`);
 	console.log();
-	let successCount = 0;
-	let failCount = 0;
 	for (const update of updates) {
 		console.log(`${TEXT}Updating ${update.name}...${RESET}`);
 		const installUrl = buildUpdateInstallSource(update.entry);
@@ -4526,14 +4584,101 @@ async function runUpdate() {
 			console.log(`  ${DIM}✗ Failed to update ${update.name}${RESET}`);
 		}
 	}
+	printSkippedSkills(skipped);
+	return {
+		successCount,
+		failCount,
+		checkedCount
+	};
+}
+async function updateProjectSkills(skillFilter) {
+	const projectSkills = await getProjectSkillsForUpdate(skillFilter);
+	let successCount = 0;
+	let failCount = 0;
+	if (projectSkills.length === 0) {
+		if (!skillFilter) {
+			console.log(`${DIM}No project skills to update.${RESET}`);
+			console.log(`${DIM}Install project skills with${RESET} ${TEXT}npx skills add <package>${RESET}`);
+		}
+		return {
+			successCount,
+			failCount,
+			foundCount: 0
+		};
+	}
+	console.log(`${TEXT}Refreshing ${projectSkills.length} project skill(s)...${RESET}`);
 	console.log();
-	if (successCount > 0) console.log(`${TEXT}✓ Updated ${successCount} skill(s)${RESET}`);
-	if (failCount > 0) console.log(`${DIM}Failed to update ${failCount} skill(s)${RESET}`);
+	for (const skill of projectSkills) {
+		console.log(`${TEXT}Updating ${skill.name}...${RESET}`);
+		const installUrl = buildLocalUpdateSource(skill.entry);
+		const cliEntry = join(__dirname, "..", "bin", "cli.mjs");
+		if (!existsSync(cliEntry)) {
+			failCount++;
+			console.log(`  ${DIM}✗ Failed to update ${skill.name}: CLI entrypoint not found at ${cliEntry}${RESET}`);
+			continue;
+		}
+		if (spawnSync(process.execPath, [
+			cliEntry,
+			"add",
+			installUrl,
+			"-y"
+		], {
+			stdio: [
+				"inherit",
+				"pipe",
+				"pipe"
+			],
+			encoding: "utf-8",
+			shell: process.platform === "win32"
+		}).status === 0) {
+			successCount++;
+			console.log(`  ${TEXT}✓${RESET} Updated ${skill.name}`);
+		} else {
+			failCount++;
+			console.log(`  ${DIM}✗ Failed to update ${skill.name}${RESET}`);
+		}
+	}
+	return {
+		successCount,
+		failCount,
+		foundCount: projectSkills.length
+	};
+}
+async function runUpdate(args = []) {
+	const options = parseUpdateOptions(args);
+	const scope = await resolveUpdateScope(options);
+	if (options.skills) console.log(`${TEXT}Updating ${options.skills.join(", ")}...${RESET}`);
+	else console.log(`${TEXT}Checking for skill updates...${RESET}`);
+	console.log();
+	let totalSuccess = 0;
+	let totalFail = 0;
+	let totalFound = 0;
+	if (scope === "global" || scope === "both") {
+		if (scope === "both" && !options.skills) console.log(`${BOLD}Global Skills${RESET}`);
+		const { successCount, failCount, checkedCount } = await updateGlobalSkills(options.skills);
+		totalSuccess += successCount;
+		totalFail += failCount;
+		totalFound += checkedCount;
+		if (scope === "both" && !options.skills) console.log();
+	}
+	if (scope === "project" || scope === "both") {
+		if (scope === "both" && !options.skills) console.log(`${BOLD}Project Skills${RESET}`);
+		const { successCount, failCount, foundCount } = await updateProjectSkills(options.skills);
+		totalSuccess += successCount;
+		totalFail += failCount;
+		totalFound += foundCount;
+	}
+	if (options.skills && totalFound === 0) console.log(`${DIM}No installed skills found matching: ${options.skills.join(", ")}${RESET}`);
+	console.log();
+	if (totalSuccess > 0) console.log(`${TEXT}✓ Updated ${totalSuccess} skill(s)${RESET}`);
+	if (totalFail > 0) console.log(`${DIM}Failed to update ${totalFail} skill(s)${RESET}`);
+	if (totalSuccess === 0 && totalFail === 0) {}
 	track({
 		event: "update",
-		skillCount: String(updates.length),
-		successCount: String(successCount),
-		failCount: String(failCount)
+		scope,
+		skillCount: String(totalSuccess + totalFail),
+		successCount: String(totalSuccess),
+		failCount: String(totalFail)
 	});
 	console.log();
 }
@@ -4593,11 +4738,9 @@ async function main() {
 			await runList(restArgs);
 			break;
 		case "check":
-			runCheck(restArgs);
-			break;
 		case "update":
 		case "upgrade":
-			runUpdate();
+			await runUpdate(restArgs);
 			break;
 		case "--help":
 		case "-h":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skills",
-  "version": "1.4.8",
+  "version": "1.5.0",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {