ai-cli-version
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI commands (
claude,codex,grok,muse, andagy) to determine the currently installed version. It also includes an optional update flow that executes the official update commands for these tools upon user confirmation.\n- [EXTERNAL_DOWNLOADS]: The Python script fetches version metadata from well-known and official sources including the npm registry, GitHub API, Meta's release channels, and the Gemini CLI auto-updater service. These requests are limited to read-only metadata retrieval and do not involve executable code downloads from untrusted sources.\n- [SAFE]: No malicious patterns such as credential exfiltration, persistence mechanisms, or obfuscation were detected. The skill follows security best practices by using the Python standard library only and requiring explicit user consent for any modifications to the system (CLI updates).
Audit Metadata