global-setup

Pass

Audited by Gen Agent Trust Hub on Feb 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill uses the Bash tool to execute local setup scripts and Git commands, which is standard for an environment configuration tool.
  • [PROMPT_INJECTION] (LOW): The skill contains an indirect prompt injection surface (Category 8) because it uses user-supplied text directly in bash command arguments. * Ingestion points: User prompts for paths and author names. * Boundary markers: Absent. * Capability inventory: Access to Bash, Read, and Write. * Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 21, 2026, 08:22 AM