agent-development
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill uses and recommends specific steering phrases in agent descriptions and metadata (
plugin.json), such as 'MUST BE USED' and 'Use PROACTIVELY'. These are designed to override or forcefully influence the default task delegation logic of the AI system. - [COMMAND_EXECUTION]: The skill provides instructions in
README.mdandrules/agent-memory-limits.mdto modify shell startup files (e.g.,~/.bashrc) to setNODE_OPTIONSfor memory heap increases. While intended for performance optimization, modifying shell profiles is a persistence mechanism that affects the user's environment across sessions. - [COMMAND_EXECUTION]: The skill advises users in
rules/custom-agent-instructions.mdto add a broad list of Bash commands to an allowlist in.claude/settings.json. This includes commands likeBash(cat *),Bash(mv *), andWebFetch(domain:*), which reduces the security sandbox by permitting these operations without explicit user approval for each instance.
Audit Metadata