update-claude

Warn

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Modifies system shell configuration files (~/.bashrc and ~/.zshrc) to inject a permanent shell function. This behavior establishes persistence on the host system to ensure the helper function is available in future terminal sessions.
  • [COMMAND_EXECUTION]: Uses the rm -rf command to delete a package directory derived from the npm root -g command, which involves elevated filesystem operations on global node_modules paths.
  • [EXTERNAL_DOWNLOADS]: Initiates the download and global installation of the @anthropic-ai/claude-code package from the npm registry using npm install -g. While targeting a known vendor, this involves executing remote code locally.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 13, 2026, 06:41 AM