starter-kit-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones official Laravel repositories from GitHub (e.g., vue-starter-kit, react-starter-kit) to access upstream feature code for synchronization purposes.
- [COMMAND_EXECUTION]: Utilizes system-level tools including
gitfor version control management, theghCLI for interacting with the GitHub API, andjqfor robust parsing of command output. - [DYNAMIC_EXECUTION]: Discovers and executes verification commands such as
npm run buildorcomposer testdefined within the user's project configuration files to ensure behavior preservation after updates. - [INDIRECT_PROMPT_INJECTION]: Potential risks from untrusted upstream content are mitigated through a forced manual review process for manifest modifications and interactive conflict resolution during the feature application phase.
Audit Metadata