superskills-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches updates from the official GitHub repository for 'superskills' (github.com/ariadoss/superskills).
- [COMMAND_EXECUTION]: Executes git commands to synchronize the local installation with the remote repository.
- [DYNAMIC_EXECUTION]: Runs a
./setupscript located within the updated repository to complete the installation. - [INDIRECT_PROMPT_INJECTION]: The skill processes file content and script output.
- Ingestion points: reads VERSION file and captures output from the setup script in SKILL.md.
- Boundary markers: none observed.
- Capability inventory: executes shell commands via Bash and reads files via the Read tool.
- Sanitization: no explicit sanitization of input data before processing.
Audit Metadata