arkcli-update

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes arkcli commands to check for updates, perform upgrades, and set configuration values (e.g., arkcli update --check, arkcli update --yes, arkcli config set update.mode). These are standard operations for a CLI management skill.
  • [REMOTE_CODE_EXECUTION]: While the update command triggers an external npm execution to fetch new versions of the tool, this is the intended primary purpose of the skill. The instructions explicitly forbid automatic background updates and require explicit user consent and platform-specific safety checks (SRI, atomic transactions) before execution.
  • [SAFE]: The skill implements strong safety boundaries: it refuses to install Node/npm if missing, halts on environment mismatch (NVM/prefix conflicts), and strictly follows a 'fail-closed' pattern where errors result in a rollback to the previous version rather than a partial or broken state.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 11:49 AM
Security Audit — agent-trust-hub — arkcli-update