pnpm-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Data Retrieval: The skill fetches package metadata and integrity information from the npm registry and repository data from GitHub APIs. These operations target official registries and repositories essential for toolchain verification.
- Integrity Verification: Instructions include steps to verify the
sha512integrity of the target pnpm version, ensuring the downloaded package matches the registry's recorded hash. - Isolated Preflight Execution: The
preflight.mjsscript performs test installations and self-updates within temporary directories. This approach minimizes side effects on the host environment during the verification phase. - Command Execution: The skill utilizes standard utility tools to manage the toolchain. These commands are directed towards the intended purpose of dependency and CI workflow maintenance.
Audit Metadata