chief-upgrade
Upgrades the chief tool to the latest version and provides information on new features.
Install this skill
Security score
The chief-upgrade skill was audited on Jun 5, 2026 and we found 12 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 25 | ```bash |
Access to hidden dotfiles in home directory
| 28 | [ -z "$_AUTO" ] && _AUTO=$(~/.claude/skills/chief/bin/chief-config get auto_upgrade 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 42 | ~/.claude/skills/chief/bin/chief-config set auto_upgrade true |
Access to hidden dotfiles in home directory
| 48 | _SNOOZE_FILE=~/.chief/update-snoozed |
Access to hidden dotfiles in home directory
| 64 | Tell user the snooze duration: "Next reminder in 24h" (or 48h or 1 week, depending on level). Tip: "Set `auto_upgrade: true` in `~/.chief/config.yaml` for automatic upgrades." |
Access to hidden dotfiles in home directory
| 68 | ~/.claude/skills/chief/bin/chief-config set update_check false |
Access to hidden dotfiles in home directory
| 70 | Tell user: "Update checks disabled. Run `~/.claude/skills/chief/bin/chief-config set update_check true` to re-enable." |
Access to hidden dotfiles in home directory
| 167 | mkdir -p ~/.chief |
Access to hidden dotfiles in home directory
| 168 | echo "$OLD_VERSION" > ~/.chief/just-upgraded-from |
Access to hidden dotfiles in home directory
| 169 | rm -f ~/.chief/last-update-check |
Access to hidden dotfiles in home directory
| 170 | rm -f ~/.chief/update-snoozed |
Access to hidden dotfiles in home directory
| 201 | ~/.claude/skills/chief/bin/chief-update-check --force 2>/dev/null || \ |