setup-medsci
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute several system commands includinguname,python3 --version,Rscript --version,node --version,git --version,claude --version, andclaude mcp list. These executions are limited to version discovery and environment verification, consistent with the skill's stated purpose as a diagnostic tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from local command outputs (such as tool version strings and the list of connected MCP servers) to generate a diagnostic table, creating a vulnerability surface where maliciously crafted tool output could influence the agent.
- Ingestion points: Command outputs from environment discovery tools and
claude mcp list(found inSKILL.mdandreferences/setup-checklist.md). - Boundary markers: The instructions provide specific version comparison and parsing rules in
references/setup-checklist.mdto structure how the agent interprets the ingested data. - Capability inventory: The skill utilizes
Bashfor read-only system queries and writes a local diagnostic log to~/.medsci-skills/(SKILL.md). - Sanitization: The instructions include strict anti-hallucination rules, requiring the agent to report exact stdout and failure messages without fabrication (
SKILL.md).
Audit Metadata