qqbot-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a command to download and execute a shell script (
upgrade-via-npm.sh) from the officialtencent-connectGitHub repository. This pattern is used to facilitate the intended plugin upgrade functionality. - [COMMAND_EXECUTION]: The skill generates a terminal command (
curl | bash) for the agent to execute in the user's environment. The skill documentation includes a 'Security Tips' section explicitly informing the user about the nature of this command and advising trust in the official repository before execution.
Audit Metadata