just-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates a complex sequence of system commands for dependency management and testing, including
just upgrade,mise upgrade,uv sync, andplaywright install. - [CREDENTIALS_UNSAFE]: The skill retrieves a sensitive GitHub authentication token using the command
mise token github --rawto facilitate automated updates to repository workflows and actions. - [EXTERNAL_DOWNLOADS]: The skill fetches tools and configuration files from external sources, such as the
npm-check-updatesutility viapnpm dlxand rule definitions from theiloveitaly/llm-ide-rulesrepository. - [INDIRECT_PROMPT_INJECTION]: The skill ingests instructions from an external repository, which are then used to influence agent behavior across multiple IDE clients.
- Ingestion points: The
llm-ide-rules downloadcommand fetchesinstructions.mdandcommands.mdfrom a remote source into the local workspace. - Boundary markers: No explicit delimiters or safety warnings are provided to separate these external instructions from the agent's core guidelines.
- Capability inventory: The skill possesses broad permissions, including shell execution, file system modification, and network access via package managers.
- Sanitization: The skill does not perform validation or sanitization on the downloaded instruction files before they are applied to the agent's environment.
Audit Metadata