plugin-update

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several claude plugin CLI commands to list, install, and update plugins. It also runs local shell scripts (discover-plugins.sh, fetch-latest-versions.sh) to gather system state and version metadata.
  • [EXTERNAL_DOWNLOADS]: The skill downloads plugin configuration and version metadata from https://raw.githubusercontent.com/kochetkov-ma/claude-brewcode and interacts with the official GitHub API via the gh CLI tool. These operations are restricted to the author's own repository and are consistent with the skill's primary purpose of plugin management.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 06:22 PM
Security Audit — agent-trust-hub — plugin-update