utility-update-pm-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Instructs the agent to query local versions via files (
plugin.json,marketplace.json,CHANGELOG.md) and check remote versions using git commands (git ls-remote), curl, wget, or GitHub CLI (gh). - [EXTERNAL_DOWNLOADS]: Fetches the release update package (
pm-skills-vX.Y.Z.zip) directly from the product-on-purpose GitHub release endpoint. This conforms to standard vendor lifecycle management protocols and poses no escalation risk as it targets the author's own infrastructure with adequate user verification boundaries.
Audit Metadata