check-version

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches marketplace metadata and plugin manifests from the vendor's repository on GitHub (raw.githubusercontent.com/b-open-io/claude-plugins) to retrieve the latest version information. This involves standard data retrieval from a well-known service.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from GitHub. The potential for instruction injection is mitigated by the script's use of targeted parsing to extract version strings, which are then provided to the agent in a structured JSON format.
  • [DYNAMIC_EXECUTION]: The shell script utilizes a Python one-liner for JSON parsing and URL construction. This is a routine operational pattern for handling data and does not incorporate or execute untrusted code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:41 AM