deliverable-upgrade
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to detect the installation environment (checking for directory paths) and to perform the upgrade (using git rev-parse, git pull, and git fetch).
- [EXTERNAL_DOWNLOADS]: The skill fetches version metadata and source code from the author's GitHub repository (github.com/canhta/deliverable). These are legitimate vendor resources used for the stated purpose of software updates.
- [REMOTE_CODE_EXECUTION]: The skill uses
npx skills addandgit cloneto update its own components. Since these resources originate from the vendor's own infrastructure, this is considered standard functional behavior.
Audit Metadata