course-skill-update-checker
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to GitHub to retrieve the latest version information for maintenance purposes.
- Source:
https://api.github.com/repos/lensetek/Course-Agent-Skills/releases/latest - Purpose: Comparison of local and remote version strings to identify available updates.
- [COMMAND_EXECUTION]: The skill provides instructions to run shell commands for updating its own files and associated skills.
- Commands:
npx --yes skills add -g https://github.com/lensetek/Course-Agent-Skills -yandgit pull origin main. - Verification: These operations target the official vendor repository from the author 'lensetek'.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external release notes which is then incorporated into the agent's context to inform the user about changes.
- Ingestion points: Release metadata fetched from the GitHub API (as described in
SKILL.md). - Boundary markers: The skill instructions focus on displaying the changelog to the user for manual review.
- Capability inventory: Associated capabilities include shell command execution for package updates.
- Sanitization: Content is fetched from the author's own official repository for the primary purpose of version notification.
Audit Metadata