@kamadorueda/update-system

Update flake.lock to latest versions of all dependencies

skillclaude

Install

agr install @kamadorueda/update-system --target claude

Writes 1 file into .claude/skills/, pinned to git-2220edc3.

.claude/skills/update-system/SKILL.md

Document

name: update-system description: Update flake.lock to latest versions of all dependencies user-invocable: true

Update System Dependencies

Update the flake.lock to the latest versions of all inputs (nixpkgs, fenix, home-manager, etc).

Steps

Update lockfile
```
nix flake update
```
This fetches the latest versions from all input repositories and updates flake.lock.
Build to test
```
nix build .#nixosConfigurations.machine.config.system.build.toplevel
```
This validates the new dependencies work. The build will fail if there are compatibility issues to fix.
Fix compatibility issues
Format and commit
```
scripts/format
```

Notes

Build times vary; allow 10-30 minutes for a full system build
If the build fails, read the error carefully—it usually points to the problematic file and line
Test thoroughly before applying to the running system

Trustgrade A

passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
passType matchnot applicable to this artifact type
Whether the artifact is really the kind of thing its metadata claims it is.
passFreshness
How long since the source repository was last pushed to.
passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

Aevery check passed
Bone warning
Ctwo warnings
Dprompt injection or body integrity failed, or three warnings
Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

git-2220edc304822026-07-31