check-updates
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- File System Access: The skill reads and writes to a local configuration directory (
~/.config/fabric-collection/) to manage the update schedule. This is a common practice for state persistence in developer tools to ensure checks only run periodically (e.g., once a week) rather than on every invocation. - External Data Retrieval: The skill fetches version information and changelog data from GitHub via multiple methods, including the GitHub REST API and GitHub MCP tools. These operations are restricted to retrieving project metadata and do not involve downloading or executing arbitrary binaries.
- Command Execution: The skill utilizes local system commands like
gitanddateto determine the current version and time. These commands are used within their intended scope for version management and environment detection. - Third-Party Content Processing: The skill displays information from the project's CHANGELOG.md. While this involves processing external data, the content is sourced from the official project repository to inform the user of recent changes.
Audit Metadata