update-claude
Warn
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Modifies system shell configuration files (~/.bashrc and ~/.zshrc) to inject a permanent shell function. This behavior establishes persistence on the host system to ensure the helper function is available in future terminal sessions.
- [COMMAND_EXECUTION]: Uses the
rm -rfcommand to delete a package directory derived from thenpm root -gcommand, which involves elevated filesystem operations on global node_modules paths. - [EXTERNAL_DOWNLOADS]: Initiates the download and global installation of the
@anthropic-ai/claude-codepackage from the npm registry usingnpm install -g. While targeting a known vendor, this involves executing remote code locally.
Audit Metadata