squad-version-check
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a command to query the public npm registry (
npm view @bradygaster/squad-cli dist-tags --json) to retrieve version tags. This is a standard administrative operation for checking package availability. - [DYNAMIC_EXECUTION]: The skill includes a Node.js one-liner designed to read a local version cache file (
update-check.json) from standard operating system configuration directories (e.g.,%APPDATA%,Library/Application Support, or.config). The script is strictly limited to reading application-specific metadata to determine if the version information is stale, and it does not perform any network operations or execute arbitrary external code.
Audit Metadata