source-command-recall-update
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill queries the GitHub API (api.github.com/repos/edheltzel/Recall/releases/latest) to retrieve the latest version tag and release notes. This is a standard check for updates from the software's own repository.
- [COMMAND_EXECUTION]: Local commands such as
recall --versionandreadlinkare used to inspect the current installation. The skill also attempts to run a local check command (./update.sh --check) if the source directory is found, which is a safe, read-only operation provided by the vendor.
Audit Metadata