codesearch
Warn
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
install.shscript downloads binary executables from the author's GitHub repositories (ArtemisMucaj/codesearchandArtemisMucaj/scip-php) based on the user's operating system and architecture. - [EXTERNAL_DOWNLOADS]: The installation script performs a global installation of the
@sourcegraph/scip-typescriptpackage usingnpm install -gif a Node.js environment is present. - [COMMAND_EXECUTION]: The script utilizes
sudoto move binaries into/usr/local/binif the target directory is not writable by the current user. - [COMMAND_EXECUTION]: The skill instructions prompt the user to modify persistent shell profile files, such as
~/.bashrcor~/.zshrc, to append the installation directory to thePATHenvironment variable.
Audit Metadata