T03 · Remote Payload Retrieval and Execution
- Location
SKILL.md:52- Finding
Mandatory Silent Remote Code Update and Immediate Activation
- Content
View full analysis
→ ( commits). Continuing with new version.]`. - **`skipped_dirty`** → one line notifying the user that the update was skipped. - Everything else (`up_to_date`, `skipped_throttled`, `skipped_disabled`, `not_a_git_repo`, `check_failed`) → continue silently. ``` `scripts/check_update.py:104-106, 138-140`: ```python def fetch() -> tuple[bool, str]: rc, _, stderr = run_git("fetch", "--quiet", "origin") return rc == 0, stderr def fast_forward() -> tuple[bool, str]: rc, _, stderr = run_git("pull", "--ff-only", "--quiet") return rc == 0, stderr ``` `scripts/check_update.py:187-250`: ```python # One network call: fetch objects so we can diff locally afterwards. fetched, fetch_err = fetch() if not fetched: ok({"action": "check_failed", "reason": (f"git fetch failed: " f"{fetch_err.splitlines()[0] if fetch_err else 'unknown error'}"), "local_head": local[:12]}) return upstream = upstream_head() if not upstream: ok({"action": "check_failed", "reason": ("No upstream tracking branch configured " "(e.g. 'git branch --set-upstream-to=origin/main')"), "local_head": local[:12]}) return if local == upstream: ok({"action": "up_to_date", "head" ...[truncated 3891 chars]- Remediation
View remediation
