ttm-update
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands to detect installation methods, check versions, and perform upgrades. This includes using
git pull,npm install, and running a localinstall.jsscript to finalize the update process. - [EXTERNAL_DOWNLOADS]: Fetches version information and software updates from the official npm registry and remote Git repositories, which are recognized well-known services.
- [REMOTE_CODE_EXECUTION]: Installs and executes code from the
taketomarketnpm package and runs a local installation script (install.js) discovered during the install-detect phase. These actions are gated by detection logic and, in the case of file synchronization, user confirmation viaAskUserQuestion.
Audit Metadata