jaan-init
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bootstrap script
${CLAUDE_PLUGIN_ROOT}/scripts/bootstrap.shto initialize the project directory. This is a vendor-controlled script included with the plugin for environment setup.- [PROMPT_INJECTION]: The skill ingests data from local lesson files during the pre-execution phase, creating an indirect prompt injection surface. Ingestion points:${JAAN_LEARN_DIR}/jaan-to-jaan-init.learn.md. Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined in the skill markdown. Capability inventory: The skill has the ability to execute bash scripts (bootstrap.sh) and edit project files (.gitignore). Sanitization: No specific sanitization or validation of the ingested lesson content is performed before processing.
Audit Metadata