ce-update

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches version information from the official repository EveryInc/compound-engineering-plugin on GitHub using the gh api command. This is used to verify if the locally installed plugin is up to date.
  • [COMMAND_EXECUTION]: Utilizes dynamic context injection (the ! command syntax) to execute shell commands when the skill is loaded.
  • Uses gh api to fetch remote metadata.
  • Uses echo, basename, and dirname to parse the local file system path provided by the environment variable ${CLAUDE_SKILL_DIR} to determine the current version.
  • These executions are limited to path resolution and version comparison as part of the skill's primary functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 12:03 PM
Security Audit — agent-trust-hub — ce-update