update-global-dotlas-skills

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the current skill catalog from the official dotlas/skills GitHub repository to establish a source of truth for synchronization.
  • [COMMAND_EXECUTION]: Utilizes npx skills commands to perform global installation and removal of skills, and git for shallow-cloning the catalog.
  • [REMOTE_CODE_EXECUTION]: Executes a Python script via a shell heredoc to parse the local lock file and the cloned catalog for identifying stale entries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 11:31 AM
Security Audit — agent-trust-hub — update-global-dotlas-skills