agent-symlink-init
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands including
mkdir -pandln -sfnto initialize standardized directory structures and establish symbolic links within the repository. - [COMMAND_EXECUTION]: The skill performs targeted deletion of legacy directories and scripts, such as
.rulerandsync-llm-skills.ts, to remove deprecated migration automation. - [PROMPT_INJECTION]: The skill processes untrusted data from repository files to perform automated edits, creating an indirect injection surface. Ingestion points:
package.jsonand.gitignorein the repository root. Boundary markers: Absent. Capability inventory:mkdir,ln,rm, and file-write operations across ALL scripts. Sanitization: Absent.
Audit Metadata