update
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/update.pyscript executes various shell commands usingsubprocess.run, primarilygitfor repository synchronization (fetch, merge, pull) and theclaudeCLI for managing plugin updates. These operations are standard for an update mechanism. - [DYNAMIC_EXECUTION]: The skill includes a
verifycommand that executes local verification scripts (tests/check_plugins.pyandtests/demos.sh) to ensure the updated environment is functional. It also uses__import__('json')within its demo/test functions for internal data processing. - [DATA_EXPOSURE]: The script reads files in the user's Claude Code configuration directory (e.g.,
installed_plugins.json) to identify current versions and installation methods. This data is used solely to determine the appropriate update logic for the current environment.
Audit Metadata