lsp-code-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/update.sh script fetches updates and version metadata from the official vendor repository at https://github.com/lsp-client/lsp-skill.
  • [REMOTE_CODE_EXECUTION]: The skill's setup process involves running scripts/update.sh, which installs the lsp-cli package from a public registry using the uv tool. The script also downloads a compressed archive from GitHub and replaces the skill's local directory contents with the new files.
  • [COMMAND_EXECUTION]: The SKILL.md file contains mandatory instructions for the agent to execute shell commands, specifically the scripts/update.sh script and starting the LSP server using lsp server start. The update script performs file system operations, including removing old files and extracting new ones to the skill directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:35 AM