utility-update-pm-skills
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version metadata and release ZIP archives from the official vendor repository at
https://github.com/product-on-purpose/pm-skills. These downloads are used to identify updates and retrieve new skill content. - [COMMAND_EXECUTION]: Utilizes common system utilities such as
curl,wget,git, and the GitHub CLI (gh) to perform network checks and download assets. It also uses file system commands likecpfor creating backups and applying updates. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including GitHub release notes and CHANGELOG files, to generate previews of what has changed between versions. While this represents an ingestion surface for untrusted data, the skill includes a human-in-the-loop confirmation step before any files are written.
- [DYNAMIC_EXECUTION]: The primary purpose of the skill is to update the agent's own capabilities by overwriting local skill and command files with newer versions from the release archive. The update process includes validation steps to ensure archive integrity before files are moved to the production directories.
Audit Metadata