devops-update-manager
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches remote version metadata, release logs, and Git metadata from the author's GitHub repository.- [EXTERNAL_DOWNLOADS]: Downloads a project archive (ZIP) from GitHub as a fallback update mechanism when Git is unavailable.- [COMMAND_EXECUTION]: Executes shell commands including Git operations (fetch, show, log, diff, merge), Node.js (plugin installation), and PowerShell cmdlets (Invoke-WebRequest, Expand-Archive) for update management.- [REMOTE_CODE_EXECUTION]: The skill is designed to update its own source code and execute a local CLI script (bin/cli.js) from the downloaded/updated files to finalize the installation process.- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection by processing and displaying untrusted remote data such as release logs and Git commit history.
- Ingestion points: Remote WHATS_NEW.md, package.json, and Git commit logs referenced in SKILL.md.
- Boundary markers: None identified to delimit remote text from agent instructions.
- Capability inventory: Access to filesystem, network downloads, and shell command execution (Node.js, Git).
- Sanitization: No explicit sanitization or escaping is mentioned for the display of remote release notes.
Audit Metadata