terum-skills machine status

VerifiedCaution

Shows terum-skills setup state (team, clone, session hook, pending work) and whether a newer CLI release exists, as Markdown boards.

Sby Skills Guide Bot
DevOpsBeginner
9/21/2026
Claude CodeCodex
#cli-status#setup-verification#environment-diagnostics#update-check#terum-skills

Recommended for

Automated summary

Renders the local terum-skills setup state as two Markdown boards — team, clone, session hook, pending work and machine facts — together with whether a newer CLI release is available.

Strengths

  • Runs two read-only commands (`status`, then `update`) and shows the boards verbatim without paraphrasing
  • Explicitly separates a successful query (exit 0) from a complete setup, flagging the get-started headline when no team exists
  • Handles offline sandboxes by inserting `--prefer-offline` for Codex and by handing network verbs to a terminal instead of forcing them
  • Never touches a package manager: the update command is printed for the user, not executed

Limitations

  • Diagnostic only — pending installs or removals on the status board must be retried elsewhere
  • Depends on the terum-skills CLI and `npx` being reachable or cached; otherwise the release check is skipped
  • The suggested update command must be run by the user in a terminal; the agent cannot apply it
When to use it

Use it when the user asks whether terum-skills is set up, in sync or up to date on this machine, or when something about the local setup appears to be off.

When not to use it

Do not use it to actually sync, install, publish or invite, or to change configuration — the skill only reads and reports.

Security analysis

Caution
Quality score82/100

The skill runs a third-party npm package via npx for legitimate status/update reporting and explicitly avoids package-manager mutations, but executing an unpinned latest package from the registry introduces supply-chain and network risk, so caution is appropriate rather than safe.

Findings
  • •Executes npx -y terum-skills@latest, which downloads and runs a third-party package from the npm registry without a pinned version or integrity check.
  • •Relies on network access for the update command; if the package or registry is compromised, arbitrary code could run.
  • •No allowed-tools declared in the skill metadata, yet it instructs the agent to use its shell tool.
How this analysis is made

Examples

Check setup
Is terum-skills actually set up on this machine?
Up-to-date check
Can you check whether my terum-skills clone is behind a newer release?
Something feels off
Something seems off with my terum-skills setup — show me the current state and any pending work.

name: skill-status description: "Show the state of terum-skills on this machine — team, clone, session hook, pending work, machine facts — and whether a newer CLI release exists, as Markdown boards. Use when the user asks whether terum-skills is set up, in sync or up to date, or when something about it seems off." metadata: managed-by: terum-skills short-description: "Show terum-skills setup state and available updates"

Show where this machine stands.

Arguments: everything after the command (in Claude Code this arrives as "$ARGUMENTS"): none are expected; ignore any.

Command

npx -y terum-skills@latest status --format md
npx -y terum-skills@latest update --format md

Run both and show both boards, status first. Without network access (see Sandbox) run only the first and say the release check was skipped.

Before

Nothing to confirm: status reads; update reads git tags from the terum-skills release repository (a configured GitHub team authorises that one probe, at most once a day) and prints the command that would update this copy — it never runs a package manager.

After

Show the boards verbatim. Exit 0 from status means the query succeeded, not that setup is complete: a get-started headline means there is no team yet. Pending work on the status board needs the matching install or removal retried, not a fetch. Offer the Next: line; the update board's command is for the user to run in a terminal, never for you.

Rules

  • No TTY: never pipe y, never drive the CLI with expect, never add --frames to dodge a question. A question the CLI asks means the verb belongs in a terminal: say so and hand over the command.
  • Never use the skill-file !`command` injection; run every command with your shell tool and read its output.
  • Do not cd; run from the current working directory and pass absolute paths.
  • Exit 1 is a result, not a retry: show the failure block, do not re-run, and do not claim earlier steps were rolled back.

Sandbox

When CODEX_SANDBOX_NETWORK_DISABLED=1 is set and the command starts with npx, add --prefer-offline after npx so a cached package resolves without the registry; if npx still reports a network error, ask the user to run the command in a terminal. In that sandbox the verbs that need the network — sync, install, publish, invite, eval, and update's release probe — are handed to a terminal with the reason.

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/terum-skills-machine-status-muar2yzz' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/terum-skills-machine-status-muar2yzz/download' --output '.skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md.part' && mv '.skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md.part' '.skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.

Claude Code
test -f '.skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md' && test -s '.skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/skill-status' && cp -R '.skill-downloads/terum-skills-machine-status-muar2yzz' '.claude/skills/skill-status'

Codex
test -f '.skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md' && test -s '.skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md' && mkdir -p '.agents/skills' && test ! -e '.agents/skills/skill-status' && cp -R '.skill-downloads/terum-skills-machine-status-muar2yzz' '.agents/skills/skill-status'

OpenSkills

OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.

Official OpenSkills installation
openskills install './.skill-downloads/terum-skills-machine-status-muar2yzz'

openskills read 'terum-skills-machine-status-muar2yzz'

Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.

For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.

openskills sync

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/terum-skills-machine-status-muar2yzz/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.

Related skills