upgrade-agent-native
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the
@agent-native/corepackage from the npm registry usingnpx. This is a standard mechanism for executing the latest version of a development tool without manual installation. - [REMOTE_CODE_EXECUTION]: Uses
npxto execute code from the@agent-native/corepackage. While this involves running remote code, it is restricted to the specific, framework-related CLI tool required for the skill's primary purpose. - [COMMAND_EXECUTION]: Facilitates the execution of project-level commands including
agent-native upgrade,pnpm exec, andskills update scaffold. These operations are used for scaffolding, dependency management, and verification within the development environment.
Audit Metadata