codesearch

Warn

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The install.sh script downloads binary executables from the author's GitHub repositories (ArtemisMucaj/codesearch and ArtemisMucaj/scip-php) based on the user's operating system and architecture.
  • [EXTERNAL_DOWNLOADS]: The installation script performs a global installation of the @sourcegraph/scip-typescript package using npm install -g if a Node.js environment is present.
  • [COMMAND_EXECUTION]: The script utilizes sudo to move binaries into /usr/local/bin if the target directory is not writable by the current user.
  • [COMMAND_EXECUTION]: The skill instructions prompt the user to modify persistent shell profile files, such as ~/.bashrc or ~/.zshrc, to append the installation directory to the PATH environment variable.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 27, 2026, 10:59 AM