shell-integration
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
plugin_distribution.mdfile contains template scripts for downloading binary executables from GitHub release URLs usingcurlorwget. - [COMMAND_EXECUTION]: The skill documents methods for establishing persistence in shell environments by modifying startup configuration files such as
.bashrc,.zshrc, andconfig.fish. - [COMMAND_EXECUTION]: Provides detailed patterns for using shell hooks (
precmd,PROMPT_COMMAND), ZLE widgets, and signal traps to execute code based on terminal events. - [REMOTE_CODE_EXECUTION]: Documentation includes the common industry pattern of using
evalto dynamically load shell initialization code generated by external binaries. - [DATA_EXFILTRATION]:
terminal-control.mdincludes references to OSC 52 escape sequences, which provide a mechanism for scripts to interact with the system clipboard.
Audit Metadata