update

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/update.py script executes various shell commands using subprocess.run, primarily git for repository synchronization (fetch, merge, pull) and the claude CLI for managing plugin updates. These operations are standard for an update mechanism.
  • [DYNAMIC_EXECUTION]: The skill includes a verify command that executes local verification scripts (tests/check_plugins.py and tests/demos.sh) to ensure the updated environment is functional. It also uses __import__('json') within its demo/test functions for internal data processing.
  • [DATA_EXPOSURE]: The script reads files in the user's Claude Code configuration directory (e.g., installed_plugins.json) to identify current versions and installation methods. This data is used solely to determine the appropriate update logic for the current environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 08:28 AM