Pulling Updates from Skills Repository
Sync local skills repository with upstream changes from obra/superpowers-skills
Best use case
Pulling Updates from Skills Repository is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
Sync local skills repository with upstream changes from obra/superpowers-skills
Teams using Pulling Updates from Skills Repository should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/pulling-updates-from-skills-repository/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How Pulling Updates from Skills Repository Compares
| Feature / Agent | Pulling Updates from Skills Repository | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
Sync local skills repository with upstream changes from obra/superpowers-skills
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
SKILL.md Source
# Updating Skills from Upstream
## Overview
Pull and merge upstream changes from obra/superpowers-skills into your local skills repository while preserving your personal modifications.
**Announce at start:** "I'm using the Updating Skills skill to sync with upstream."
## Prerequisites
Your skills repo must have a tracking branch configured. The plugin sets this up automatically (either as a fork with `origin` remote, or with an `upstream` remote).
## The Process
### Step 1: Check Current Status
Run:
```bash
cd ~/.config/superpowers/skills
git status
```
**If working directory is dirty:** Proceed to Step 2 (stash changes)
**If clean:** Skip to Step 3
### Step 2: Stash Uncommitted Changes (if needed)
Run:
```bash
git stash push -m "Temporary stash before upstream update"
```
Record: Whether changes were stashed (you'll need to unstash later)
### Step 3: Determine Tracking Remote and Fetch
First, detect which remote to use:
```bash
TRACKING_REMOTE=$(git rev-parse --abbrev-ref --symbolic-full-name @{u} 2>/dev/null | cut -d'/' -f1 || echo "")
```
Then fetch from the appropriate remote:
```bash
if [ -n "$TRACKING_REMOTE" ]; then
git fetch "$TRACKING_REMOTE" 2>/dev/null || true
else
git fetch upstream 2>/dev/null || git fetch origin 2>/dev/null || true
fi
```
Expected: Fetches latest commits from the tracking remote (or falls back to upstream/origin)
### Step 4: Check What's New
Run:
```bash
git log HEAD..@{u} --oneline
```
Show user: List of new commits being pulled
Note: `@{u}` refers to the upstream tracking branch for your current branch
### Step 5: Merge Changes
First, try a fast-forward merge (cleanest option):
```bash
git merge --ff-only @{u}
```
**If fast-forward succeeds:** Skip to Step 7 (no conflicts possible with fast-forward)
**If fast-forward fails:** Your branch has diverged. Try regular merge:
```bash
git merge @{u}
```
**If merge succeeds cleanly:** Proceed to Step 7
**If conflicts occur:** Proceed to conflict resolution
### Step 6: Handle Merge Conflicts (if any)
If conflicts:
1. Run `git status` to see conflicted files
2. For each conflict, explain to user what changed in both versions
3. Ask user which version to keep or how to merge
4. Edit files to resolve
5. Run `git add <resolved-file>` for each
6. Run `git commit` to complete merge
### Step 7: Unstash Changes (if stashed in Step 2)
If you stashed changes:
```bash
git stash pop
```
**If conflicts with unstashed changes:** Help user resolve them
### Step 8: Verify Everything Works
Run:
```bash
${SUPERPOWERS_SKILLS_ROOT}/skills/using-skills/find-skills
```
Expected: Skills list displays correctly
### Step 9: Announce Completion
Tell user:
- How many new commits were merged
- Whether any conflicts were resolved
- Whether their stashed changes were restored
- That skills are now up to date
## Common Issues
**"Already up to date"**: Your local repo is current, no action needed
**"fatal: no upstream configured"**: Your branch isn't tracking a remote branch. Check `git remote -v` to see available remotes, then set tracking with `git branch --set-upstream-to=<remote>/<branch>`
**Detached HEAD**: You're not on a branch. Ask user if they want to create a branch or check out main.
**Fast-forward fails, diverged branches**: Your local branch has commits that aren't in the remote. Regular merge will be needed, which may cause conflicts.
## Remember
- Always stash uncommitted work before merging
- Explain conflicts clearly to user
- Test that skills work after update
- User's local commits/branches are preservedRelated Skills
Getting Started with Skills
Skills wiki intro - mandatory workflows, search tool, brainstorming triggers
Writing Skills
TDD for process documentation - test with subagents before writing, iterate until bulletproof
Testing Skills With Subagents
RED-GREEN-REFACTOR for process documentation - baseline without skill, write addressing failures, iterate closing loopholes
Sharing Skills
Contribute skills back to upstream via branch and PR
Gardening Skills Wiki
Maintain skills wiki health - check links, naming, cross-references, and coverage
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
web-asset-generator
Generate web assets including favicons, app icons (PWA), and social media meta images (Open Graph) for Facebook, Twitter, WhatsApp, and LinkedIn. Use when users need icons, favicons, social sharing images, or Open Graph images from logos or text slogans. Handles image resizing, text-to-image generation, and provides proper HTML meta tags.
web-artifacts-builder
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
variant-analysis
Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.
wycheproof
Wycheproof provides test vectors for validating cryptographic implementations. Use when testing crypto code for known attacks and edge cases.
testing-handbook-generator
Meta-skill that analyzes the Trail of Bits Testing Handbook (appsec.guide) and generates Claude Code skills for security testing tools and techniques. Use when creating new skills based on handbook content.
ruzzy
Ruzzy is a coverage-guided Ruby fuzzer by Trail of Bits. Use for fuzzing pure Ruby code and Ruby C extensions.