plugin-update
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several
claude pluginCLI commands to list, install, and update plugins. It also runs local shell scripts (discover-plugins.sh,fetch-latest-versions.sh) to gather system state and version metadata. - [EXTERNAL_DOWNLOADS]: The skill downloads plugin configuration and version metadata from
https://raw.githubusercontent.com/kochetkov-ma/claude-brewcodeand interacts with the official GitHub API via theghCLI tool. These operations are restricted to the author's own repository and are consistent with the skill's primary purpose of plugin management.
Audit Metadata