devops-update-manager
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads update packages from a known repository associated with its author (
github.com/lensetek/Startup-Agent-Skills-Hub). This is part of the core functionality for software updates. - [COMMAND_EXECUTION]: The skill uses PowerShell commands (
git,Invoke-WebRequest,Expand-Archive,node) to manage updates and installations. These commands are scoped to the intended update path and include safety steps such as checking for uncommitted changes and validating archive structures. - [DATA_EXFILTRATION]: The skill explicitly includes a boundary instruction to 'Never leak credentials, copy .env, or modify .agents/session_memory.md', which provides a safeguard against accidental data exposure during the update process.
Audit Metadata