update-integrations-prs
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution]: The skill uses shell commands like
curlandgitto interact with GitHub and public package registries. This is expected behavior for a tool designed to manage documentation and pull requests. - [External Data Retrieval]: The skill fetches download statistics from
pypistats.organdapi.npmjs.org. These are well-known, public services used to verify package popularity according to the project's contribution policy. - [Local Script Execution]: The skill pipes JSON data from
pypistats.orginto a short Python one-liner to calculate monthly totals. This pattern is used for data processing rather than executing remote code from an untrusted source.
Audit Metadata