generate-precommit-hooks
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell commands to install development dependencies (such as husky, lint-staged, and pre-commit) and executes tool-specific commands (like cargo fmt, go test, or forge test) to verify the hook setup.
- [PROMPT_INJECTION]: The skill analyzes local project configuration files (e.g., package.json, Cargo.toml) to determine the tech stack. This represents an indirect prompt injection surface where a malicious repository could theoretically attempt to influence agent behavior through manipulated configuration data.
- Ingestion points: package.json, Cargo.toml, pyproject.toml, requirements.txt, go.mod, foundry.toml, hardhat.config.js/ts
- Boundary markers: None explicitly used when reading files
- Capability inventory: File system modification and shell command execution
- Sanitization: Not present; the skill relies on the agent's interpretation of standard config formats
Audit Metadata