update-config
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses bash process substitution to execute a remote script:
bash <(curl -fsSL https://raw.githubusercontent.com/Mizoreww/awesome-claude-code-config/main/install.sh). This allows arbitrary code from the remote server to be executed in the user's terminal session without any integrity checks or local validation. - [COMMAND_EXECUTION]: The skill executes multiple shell commands to read and write configuration files in the
~/.claude/directory and performs network requests to external domains to fetch version information and scripts. - [EXTERNAL_DOWNLOADS]: The skill fetches content from the external domain
raw.githubusercontent.com. While this targets the skill author's repository, the execution of unverified remote scripts remains a significant security risk.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/Mizoreww/awesome-claude-code-config/main/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata