skills/kevinzai/commander/ccc-upgrade/Gen Agent Trust Hub

ccc-upgrade

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard Git commands (git fetch, git submodule, git commit) to manage project dependencies. These operations are restricted to the vendor/ directory and include guards to ensure they are run from the correct repository root.
  • [COMMAND_EXECUTION]: Runs local repository scripts (node scripts/audit-frontmatter.js and node scripts/audit-counts.js) as post-update validation steps to ensure repository integrity.
  • [SAFE]: Employs explicit safety mechanisms, such as verifying the presence of .claude-plugin/marketplace.json before execution and requiring user confirmation via AskUserQuestion before performing any write operations or commits.
  • [SAFE]: The skill's behavior is consistent with its stated purpose of submodule management, with no evidence of obfuscation, unauthorized data access, or privilege escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 06:07 AM
Security Audit — agent-trust-hub — ccc-upgrade