component-version-upgrade
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands and scripts to perform system maintenance. These include using
pkillto restart the bot process,cpto refresh Python scripts, and package managers likebunandmiseto manage runtimes and dependencies. These operations are consistent with the skill's stated purpose of performing version upgrades. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to download software packages and model weights. It fetches Python dependencies and re-downloads the Kokoro TTS model from the official HuggingFace repository (
mlx-community/Kokoro-82M-bf16). These downloads originate from well-known and reputable services. - [DATA_EXFILTRATION]: The skill reads local project files such as
version.jsonandpackage.jsonto record and verify component versions. This data is used internally for state tracking and is not transmitted to any untrusted external domains.
Audit Metadata