pac-cli-update
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Data Processing: The skill fetches version metadata from the official NuGet API and processes it using Node.js. While piping network data to an interpreter is generally a security consideration, in this context, it is used to parse structured JSON to verify the existence of software packages before proceeding with an update.
- Command Execution: The skill utilizes various command-line tools such as
git,npm, and the GitHub CLI (gh) to manage the repository, install packages, and create pull requests. This behavior is consistent with the skill's stated purpose of automating software updates. - External Downloads: The skill manages updates for software packages via standard package registries. This is a routine operation for maintaining project dependencies and ensuring tools are up to date.
- Informational Instructions: The skill provides guidance for users to manually trigger external build pipelines, including instructions on setting necessary environment variables on those platforms. This is an informational component for the user and does not involve the agent handling or accessing sensitive credentials directly.
Audit Metadata