update-framework
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches framework updates from the author's official GitHub repository at
https://github.com/ar4mirez/samuel.git. These downloads are used to update local templates and guides. - [COMMAND_EXECUTION]: The workflow utilizes multiple shell commands for file management and version control, including
git clone,git subtree,cp,rm,rsync,mkdir,chmod, andtar. These are used for creating backups and performing the update migration. - [PROMPT_INJECTION]: The skill analyzes external content such as
CHANGELOG.mdandCLAUDE.mdfrom the remote repository. While this presents an indirect prompt injection surface where malicious instructions in those files could influence the agent, the risk is inherent to the framework's update process and the source is the verified vendor repository.
Audit Metadata