pnpm-upgrade

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • External Data Retrieval: The skill fetches package metadata and integrity information from the npm registry and repository data from GitHub APIs. These operations target official registries and repositories essential for toolchain verification.
  • Integrity Verification: Instructions include steps to verify the sha512 integrity of the target pnpm version, ensuring the downloaded package matches the registry's recorded hash.
  • Isolated Preflight Execution: The preflight.mjs script performs test installations and self-updates within temporary directories. This approach minimizes side effects on the host environment during the verification phase.
  • Command Execution: The skill utilizes standard utility tools to manage the toolchain. These commands are directed towards the intended purpose of dependency and CI workflow maintenance.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 05:41 PM