customerio-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npm list,npm view, andpip showvia the!command pattern and shell scripts to assess local dependency versions. These are read-only operations limited to package metadata. - [EXTERNAL_DOWNLOADS]: Includes standard instructions for developers to update their own dependencies using
npm installandpip install. These are user-initiated package manager operations. - [DYNAMIC_CONTEXT_INJECTION]: Employs the
!commandsyntax in SKILL.md to dynamically display the currently installed version ofcustomerio-nodewhen the skill is loaded. This is used for diagnostic purposes and does not execute arbitrary or dangerous code. - [SAFE]: References and documentation links point to official Customer.io GitHub repositories and documentation, which are trusted sources.
- [SAFE]: The 'jeremylongshore' author and associated domains (jeremylongshore.com, intentsolutions.io) are documented vendor resources used for attribution and are not considered malicious.
Audit Metadata