lsp-code-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/update.shscript fetches updates and version metadata from the official vendor repository athttps://github.com/lsp-client/lsp-skill. - [REMOTE_CODE_EXECUTION]: The skill's setup process involves running
scripts/update.sh, which installs thelsp-clipackage from a public registry using theuvtool. The script also downloads a compressed archive from GitHub and replaces the skill's local directory contents with the new files. - [COMMAND_EXECUTION]: The
SKILL.mdfile contains mandatory instructions for the agent to execute shell commands, specifically thescripts/update.shscript and starting the LSP server usinglsp server start. The update script performs file system operations, including removing old files and extracting new ones to the skill directory.
Audit Metadata