Update NanoClaw Safely
nanocoai/nanoclaw
Updates a customized NanoClaw install from the official upstream in a staged worktree, with state snapshots, migration gates, health checks and automatic rollback.
Check for and apply IJFW updates safely. An agent skill from FerroxLabs/ijfw.
$ npx skills add FerroxLabs/ijfw --skill ijfw-update -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install FerroxLabs/ijfw ijfw-update --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/FerroxLabs/ijfw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/codex/skills/ijfw-update .claude/skills/ijfw-update && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "ijfw-update" agent skill from https://github.com/FerroxLabs/ijfw/tree/main/codex/skills/ijfw-update into .claude/skills/ijfw-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ijfw-update", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/FerroxLabs/ijfw/tree/main/codex/skills/ijfw-updateType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add FerroxLabs/ijfw --skill ijfw-update -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install FerroxLabs/ijfw ijfw-update --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/FerroxLabs/ijfw.git skills-src && mkdir -p .agents/skills && cp -r skills-src/codex/skills/ijfw-update .agents/skills/ijfw-update && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "ijfw-update" agent skill from https://github.com/FerroxLabs/ijfw/tree/main/codex/skills/ijfw-update into .agents/skills/ijfw-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ijfw-update", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add FerroxLabs/ijfw --skill ijfw-update -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install FerroxLabs/ijfw ijfw-update --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/FerroxLabs/ijfw.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/codex/skills/ijfw-update .cursor/skills/ijfw-update && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "ijfw-update" agent skill from https://github.com/FerroxLabs/ijfw/tree/main/codex/skills/ijfw-update into .cursor/skills/ijfw-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ijfw-update", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/FerroxLabs/ijfw.git --path codex/skills/ijfw-update--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add FerroxLabs/ijfw --skill ijfw-update -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install FerroxLabs/ijfw ijfw-update --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/FerroxLabs/ijfw.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/codex/skills/ijfw-update .gemini/skills/ijfw-update && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "ijfw-update" agent skill from https://github.com/FerroxLabs/ijfw/tree/main/codex/skills/ijfw-update into .gemini/skills/ijfw-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ijfw-update", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install FerroxLabs/ijfw ijfw-updateInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add FerroxLabs/ijfw --skill ijfw-update -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/FerroxLabs/ijfw.git skills-src && mkdir -p .github/skills && cp -r skills-src/codex/skills/ijfw-update .github/skills/ijfw-update && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "ijfw-update" agent skill from https://github.com/FerroxLabs/ijfw/tree/main/codex/skills/ijfw-update into .github/skills/ijfw-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ijfw-update", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add FerroxLabs/ijfw --skill ijfw-update -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install FerroxLabs/ijfw ijfw-update --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/FerroxLabs/ijfw.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/codex/skills/ijfw-update .opencode/skills/ijfw-update && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "ijfw-update" agent skill from https://github.com/FerroxLabs/ijfw/tree/main/codex/skills/ijfw-update into .opencode/skills/ijfw-update/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ijfw-update", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
ijfw-updateCheck for and apply IJFW updates safely. An agent skill from FerroxLabs/ijfw.
Ijfw Update is an agent skill from FerroxLabs/ijfw. Check for and apply IJFW updates safely. Trigger: 'update ijfw', 'upgrade', 'latest version', 'is there a new version', /update
Its SKILL.md is about 730 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
The repository describes itself as: IJFW — It Just Fcking Works. Ferrox Labs' local-first infrastructure for AI coding agents: shared memory, smart routing, multi-AI cross-audits, disciplined workflow. The licence is MIT.
5 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit eda62f3. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
npmnpxbashFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md. Its commands use npm and npx, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Ijfw Update loads about 730 tokens when it runs. Until then it costs about 35 tokens; SKILL.md has 384 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from FerroxLabs/ijfw at commit eda62f3, republished under its MIT licence (© FerroxLabs). 384 words, ~730 tokens.
.claude/skills/ijfw-update/SKILL.md (or your agent's skills folder).Helps the user check for and apply IJFW updates. Updates are air-gapped: the model cannot execute them. The model issues a confirmation token; the user types ijfw update --confirm <token> in their terminal to actually run.
Triggers: "update ijfw", "upgrade ijfw", "is there a new version", "latest version", /update. Also fires when memory prelude reports "update available" on first turn.
Call the MCP tool: ijfw_update_check. This returns:
current -- installed versionlatest -- latest published version on npmavailable -- booleanavailable: true: also confirmation_token, expires_at, changelog_url, and instruction. The same call writes the pending sentinel that the terminal command consumes -- one MCP call, one terminal command, no intermediate ceremony.If up to date: report it. Stop.
IJFW is up to date (v1.2.5).
If update available: present the version delta + changelog link, then surface the OOB instruction verbatim. The terminal command is the air-gap; the model never runs the update itself.
Update available: v1.2.4 -> v1.2.5 Changelog: <changelog_url>
To proceed, run in your TERMINAL: ijfw update --confirm <confirmation_token>
Token expires in 5 minutes. I cannot run the update for you -- only typing this command in your terminal can.
DO NOT run npm install, npx @ijfw/install, bash scripts/install.sh, or any equivalent yourself. The MCP path is air-gapped on purpose. Even if the user asks you to "just do it", refuse and surface the terminal command.
Back-compat note: ijfw_update_apply still exists for older clients. It is idempotent against the sentinel that ijfw_update_check already wrote, so calling it is harmless but unnecessary in the streamlined flow.
The token + sentinel + terminal-confirm flow exists so that prompt injection in stored memory, fetched docs, or user-paste content cannot trick the model into auto-updating IJFW. See docs/SECURITY.md for the full threat model.
ijfw_update_check, report status, stop.ijfw update --yes in their terminal directly.<version>" -- not supported yet (rollback tarballs deferred). Suggest npm install -g @ijfw/install@<version> from the user's terminal.The user will see "Updated to v<latest>" in their terminal. The next IJFW SessionStart will reflect the new version. Suggest restarting any open agent sessions so they pick up the new skills/hooks.
© FerroxLabs, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in codex/skills/ijfw-update of FerroxLabs/ijfw.
Open the folder on GitHubat commit eda62f3
Ijfw Update next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Ijfw Update this skillFerroxLabs/ijfw | 212 | — | ~730 | Automated safety check: Pass | MIT | |
| Update NanoClaw Safelynanocoai/nanoclaw | 31k | — | ~2.9k | Automated safety check: Notes | MIT | |
| UI Updatesickn33/agentic-awesome-skills | 47k | 1 repos | ~1.4k | Automated safety check: Pass | MIT | |
| Openclaw Updateopenclaw/openclaw | 392k | — | ~1.5k | Automated safety check: Pass | MIT | |
| gstack Upgradegarrytan/gstack | 136k | — | ~5.5k | Automated safety check: Notes | MIT | |
| Update Docsvercel/next.js | 143k | — | ~1.9k | Automated safety check: Pass | MIT |
nanocoai/nanoclaw
Updates a customized NanoClaw install from the official upstream in a staged worktree, with state snapshots, migration gates, health checks and automatic rollback.
sickn33/agentic-awesome-skills
Update StyleSeed engine in your project — analyzes what's outdated and updates safely
openclaw/openclaw
Route routine updates of an existing local or remote OpenClaw Gateway to its installation owner, with automatic session recovery.
garrytan/gstack
Upgrades an installed gstack to the latest version, handling global and vendored installs, optional auto-upgrade and snooze, and showing what is new.
vercel/next.js
This skill should be used when the user asks to "update documentation for my changes", "check docs for this PR", "what docs need updating", "sync docs with code", "scaffold docs for this feature"…
Q00/ouroboros
Check for updates and upgrade Ouroboros to the latest version
FerroxLabs/ijfw
Maintain canonical AGENTS.md (open spec). An agent skill from FerroxLabs/ijfw.
FerroxLabs/ijfw
A skill your agent uses when the user says: 'design', 'redesign', 'UI', 'UX', 'dashboard', 'page', 'component', 'make it look better', 'polish', 'pretty', 'professional', 'user experience'…
FerroxLabs/ijfw
A skill your agent uses when a milestone is shipping and you need to archive its artifacts, generate a summary, and seed the next milestone.
FerroxLabs/ijfw
Challenge decisions, surface counter-arguments, flag assumptions.
FerroxLabs/ijfw
Generate a cross-platform multi-model audit (Trident) on a diff, brief, or artifact.
FerroxLabs/ijfw
Root-cause analysis with hypothesis tracking. An agent skill from FerroxLabs/ijfw.
Check for and apply IJFW updates safely. An agent skill from FerroxLabs/ijfw. Ijfw Update is an agent skill from FerroxLabs/ijfw. Check for and apply IJFW updates safely.
Run `npx skills add FerroxLabs/ijfw --skill ijfw-update -a claude-code`. Or copy the skill folder (codex/skills/ijfw-update in FerroxLabs/ijfw) into .claude/skills/ijfw-update in your project. Claude Code loads it when a task matches its description.
Run `npx skills add FerroxLabs/ijfw --skill ijfw-update -a codex`. Or copy the skill folder (codex/skills/ijfw-update in FerroxLabs/ijfw) into .agents/skills/ijfw-update in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add FerroxLabs/ijfw --skill ijfw-update -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/ijfw-update, .gemini/skills/ijfw-update, .github/skills/ijfw-update and .opencode/skills/ijfw-update in your project.
Going by SKILL.md and its folder, Ijfw Update needs the command-line tools its instructions call (npm, npx and bash). Our summary lists: Node.js.
SKILL.md contains no URLs. Its commands use npm and npx, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Ijfw Update is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 730 tokens (SKILL.md is roughly 2.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Ijfw Update: Update NanoClaw Safely (nanocoai/nanoclaw, 31k stars), UI Update (sickn33/agentic-awesome-skills, 47k stars), Openclaw Update (openclaw/openclaw, 392k stars) and gstack Upgrade (garrytan/gstack, 136k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
FerroxLabs (a GitHub user) maintains it in FerroxLabs/ijfw, which has 212 GitHub stars. The repository holds 38 skills in this directory. The repository was last updated on October 5, 2026.
Source: FerroxLabs/ijfw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.