Openwrt Package Update

What it does

When your agent uses it

• Updating any forked OpenWrt package in a NethSecurity workspace from the upstream openwrt/packages feed
• Updating a package by name (adblock
• Syncing with upstream
• Any request to align a local package fork with openwrt/packages — even if upstream is not mentioned explicitly

Example prompts

• “/openwrt-package-update”

Requirements

• Python 3
• A Bash shell
• Compatibility (from SKILL.md): Requires git and curl. Works in a NethSecurity workspace with build.conf.defaults present.
• Pre-approved tools (allowed-tools): Bash(git:*), Bash(curl:*), Bash(diff:*), Bash(tar:*), Bash(grep:*), Bash(sed:*), Bash(awk:*), Read, Write

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

1. 1Setup: bash scripts/setup-package.sh — auto-discovers upstream path, finds version commits, extracts old/new snapshots into assets/_old/…
2. 2Compare: bash scripts/diff-package.sh — shows what changed upstream
3. 3Merge: Read both snapshots, apply upstream changes to local files in packages//; update PKG_VERSION and PKG_RELEASE in the Makefile
4. 4Cross-package: Grep for any changed config keys or function names in ns-api, migration scripts, and files/ overlay; update as needed
5. 5Documentation: Update docs/ and packages/ns-api/README.md if user-facing behavior changed
6. 6Verify: Run ruff check on any changed Python files; build the package inside the container

What it can do on your machine

Read from SKILL.md and the folder at commit a22e7f9. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves these tools, so the agent can use them without asking each time:

  • Bash(git:*)
  • Bash(curl:*)
  • Bash(diff:*)
  • Bash(tar:*)
  • Bash(grep:*)
  • Bash(sed:*)
  • Bash(awk:*)
  • Read
  • Write

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Ships 3 files in scripts/ (Shell), which the agent can run.

  Shell commands in SKILL.md call:

  • bash
  • ruff

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

• Compatibility

  Requires git and curl. Works in a NethSecurity workspace with build.conf.defaults present.

  From compatibility in the SKILL.md frontmatter.

Context cost

Openwrt Package Update loads about 841 tokens when it runs, and up to ~2k if it reads all its reference files. Until then it costs about 150 tokens; SKILL.md has 273 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~150

When it runs · the whole SKILL.md, loaded when a task matches

~841

With references · SKILL.md plus every file in references/, read only if the agent opens them

~2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 273 words (~841 tokens).

name

openwrt-package-update

allowed-tools

Bash(git:*), Bash(curl:*), Bash(diff:*), Bash(tar:*), Bash(grep:*), Bash(sed:*), Bash(awk:*), Read, Write

compatibility

Requires git and curl. Works in a NethSecurity workspace with build.conf.defaults present.

metadata.domain

nethsecurity-packages

metadata.type

package-update

Read the full SKILL.md on GitHub

Files

SKILL.md and 5 other files (scripts, references, assets) in .agents/skills/openwrt-package-update of NethServer/nethsecurity.

• SKILL.md
• assets/.gitignore
• references/WORKFLOW.md
• scripts/diff-package.sh
• scripts/get-target-commit.sh
• scripts/setup-package.sh

Open the folder on GitHubat commit a22e7f9