$ gh version
gh version 2.93.0 (2026-05-27)
https://github.com/cli/cli/releases/tag/v2.93.0
root@2a75804eaf51:/# gh skill install openai/skills skills/.curated/gh-address-comments --agent warp --scope user --allow-hidden-dirs
Using ref main (b0401f07)
! Skills are not verified by GitHub and may contain prompt injections, hidden instructions, or malicious scripts. Always review skill contents before use.
✓ Installed .curated/gh-address-comments (from openai/skills@main) in root/.agents/skills
.curated/gh-address-comments/
(could not read directory)
! Skills may contain prompt injections or malicious scripts.
Review installed content before use:
gh skill preview openai/skills .curated/gh-address-comments@b0401f07213a66414d84a65cb50c1d226f99485a --allow-hidden-dirs
root@2a75804eaf51:/# gh skill update --all
! Skipping gh-address-comments: no skills found in openai/skills
Expected skills in skills/*/SKILL.md, skills/{scope}/*/SKILL.md,
{prefix}/skills/*/SKILL.md, {prefix}/skills/{scope}/*/SKILL.md,
*/SKILL.md, or plugins/*/skills/*/SKILL.md
This repository may be a curated list rather than a skills publisher
All skills are up to date.
root@2a75804eaf51:/# find /root/.agents/ -ls
1066233 4 drwxr-xr-x 3 root root 4096 May 28 16:01 /root/.agents/
1066245 4 -rw-r--r-- 1 root root 426 May 28 16:01 /root/.agents/.skill-lock.json
1066234 4 drwxr-xr-x 3 root root 4096 May 28 16:01 /root/.agents/skills
1066235 4 drwxr-xr-x 5 root root 4096 May 28 16:01 /root/.agents/skills/gh-address-comments
1066236 12 -rw-r--r-- 1 root root 11357 May 28 16:01 /root/.agents/skills/gh-address-comments/LICENSE.txt
1066237 4 -rw-r--r-- 1 root root 1476 May 28 16:01 /root/.agents/skills/gh-address-comments/SKILL.md
1066240 4 drwxr-xr-x 2 root root 4096 May 28 16:01 /root/.agents/skills/gh-address-comments/assets
1066242 4 -rw-r--r-- 1 root root 1838 May 28 16:01 /root/.agents/skills/gh-address-comments/assets/github.png
1066241 4 -rw-r--r-- 1 root root 853 May 28 16:01 /root/.agents/skills/gh-address-comments/assets/github-small.svg
1066243 4 drwxr-xr-x 2 root root 4096 May 28 16:01 /root/.agents/skills/gh-address-comments/scripts
1066244 8 -rw-r--r-- 1 root root 6537 May 28 16:01 /root/.agents/skills/gh-address-comments/scripts/fetch_comments.py
1066238 4 drwxr-xr-x 2 root root 4096 May 28 16:01 /root/.agents/skills/gh-address-comments/agents
1066239 4 -rw-r--r-- 1 root root 303 May 28 16:01 /root/.agents/skills/gh-address-comments/agents/openai.yaml
root@2a75804eaf51:/# cat /root/.agents/.skill-lock.json
{
"version": 3,
"skills": {
".curated/gh-address-comments": {
"source": "openai/skills",
"sourceType": "github",
"sourceUrl": "https://github.com/openai/skills.git",
"skillPath": "skills/.curated/gh-address-comments/SKILL.md",
"skillFolderHash": "042316bece4a9f832145dcff7d5506e99fe3ecf1",
"installedAt": "2026-05-28T16:01:03Z",
"updatedAt": "2026-05-28T16:01:03Z"
}
}
}
Describe the bug
gh skill update --allfails to update a skill that was installed from a curated path (.curated/) inopenai/skills. The update command cannot locate the skill in the source repository, even though it was successfully installed earlier.Affected version
Steps to reproduce the behavior
Expected vs actual behavior
No errors when using
gh skill update --all