recall-update
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches release metadata from the author's official GitHub repository (edheltzel/Recall) via the GitHub API. This is standard behavior for an update-checking utility.
- [COMMAND_EXECUTION]: The skill executes local commands (
readlink,which,recall) to resolve the installation path and determine the current version. It also attempts to execute a local maintenance script (./update.sh --check) to verify status. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays external content from GitHub release notes.
- Ingestion points: Release 'body' fetched from api.github.com (SKILL.md).
- Boundary markers: The instructions define a display template but do not use explicit security delimiters to isolate the external content.
- Capability inventory: Capabilities are limited to version checking and local script execution (
./update.sh --check) without elevated privileges. - Sanitization: The skill only displays the first 10 lines of the release notes.
Audit Metadata