ccc-upgrade
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes standard Git commands (
git fetch,git submodule,git commit) to manage project dependencies. These operations are restricted to thevendor/directory and include guards to ensure they are run from the correct repository root. - [COMMAND_EXECUTION]: Runs local repository scripts (
node scripts/audit-frontmatter.jsandnode scripts/audit-counts.js) as post-update validation steps to ensure repository integrity. - [SAFE]: Employs explicit safety mechanisms, such as verifying the presence of
.claude-plugin/marketplace.jsonbefore execution and requiring user confirmation viaAskUserQuestionbefore performing any write operations or commits. - [SAFE]: The skill's behavior is consistent with its stated purpose of submodule management, with no evidence of obfuscation, unauthorized data access, or privilege escalation.
Audit Metadata