update-claude
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands such as
ls,find,cat,mkdir,ln,mv, andrmdir, and utilizes the GitHub CLI (gh) to inspect and update local project configurations. These operations are primarily scoped to the.claude/directory and require explicit user consent for any destructive changes. - [EXTERNAL_DOWNLOADS]: The skill fetches agent skills from the author's repository (
Fandhe-AI/agent-cli-skills) using theskillsCLI. The instructions strictly enforce the use of a pinned version (1.5.23) of the CLI tool to mitigate supply chain risks, and included regression tests verify this pinning. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes content from local configuration files (Agents, Rules, CLAUDE.md) and GitHub API metadata. Malicious content within these external sources could theoretically influence the agent's diagnosis or output. The skill mitigates this through a mandatory user approval step (Step 3) and specific instructions for the agent to review all differences with the user.
Audit Metadata