ce-update
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches version information from the official repository
EveryInc/compound-engineering-pluginon GitHub using thegh apicommand. This is used to verify if the locally installed plugin is up to date. - [COMMAND_EXECUTION]: Utilizes dynamic context injection (the
!command syntax) to execute shell commands when the skill is loaded. - Uses
gh apito fetch remote metadata. - Uses
echo,basename, anddirnameto parse the local file system path provided by the environment variable${CLAUDE_SKILL_DIR}to determine the current version. - These executions are limited to path resolution and version comparison as part of the skill's primary functionality.
Audit Metadata