update-sf
Warn
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill attempts to read the user's shell configuration files, which are known to store sensitive credentials and environment variables.
- Evidence:
grep "alias saas-factory" ~/.zshrcandgrep "alias saas-factory" ~/.bashrcinSKILL.md. - [COMMAND_EXECUTION]: The skill executes potentially destructive file system operations using the Bash tool on paths determined by the contents of user configuration files.
- Evidence:
rm -rf .claude/andcp -r [RUTA_REPO_SF]/saas-factory/.claude/ .claude/inSKILL.md. - [REMOTE_CODE_EXECUTION]: The skill uses Git to pull code from a remote source into the local environment without verifying the source's identity or content integrity.
- Evidence:
git pull origin maininSKILL.md.
Audit Metadata