gsp-update
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a CHANGELOG.md file from the author's GitHub repository (https://raw.githubusercontent.com/jubscodes/get-shit-pretty/main/CHANGELOG.md) to display update information to the user.
- [REMOTE_CODE_EXECUTION]: The skill runs npx get-shit-pretty@latest, which retrieves and executes the latest version of the GSP installer from the npm registry. This is consistent with the skill's stated purpose of updating the package.
- [COMMAND_EXECUTION]: The skill uses shell commands for environment discovery, version verification via npm view, filesystem modifications (mv), and clearing local cache files (rm).
- [PROMPT_INJECTION]: The skill ingests untrusted remote data from the changelog, creating a surface for indirect prompt injection.
- Ingestion points: SKILL.md (fetches remote CHANGELOG.md via curl in Step 4).
- Boundary markers: Absent. The agent extracts and displays text directly from the fetched file.
- Capability inventory: Bash (capable of file system modification and remote code execution via npx).
- Sanitization: Absent. The content is not escaped or validated before processing.
Audit Metadata