environment-setup-guide
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads installation scripts from well-known technology services to facilitate the setup of developer tooling.
- Fetches the Homebrew installation script from the official GitHub repository at
https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh. - Downloads the Docker installation script from the official domain at
https://get.docker.com. - Fetches the Nodesource setup script for Node.js from
https://deb.nodesource.com/setup_20.x. - Downloads the Chocolatey installation script for Windows from
https://community.chocolatey.org/install.ps1. - [COMMAND_EXECUTION]: Provides comprehensive templates for executing shell and PowerShell commands to manage software installations and environment verification.
- Includes usage of package managers such as
brew,apt,choco,npm, andpip. - Details the execution of system commands for process identification (
lsof) and process termination (kill). - Provides a
setup.shbash script template that automates dependency installation and environment initialization. - [PRIVILEGE_ESCALATION]: Instructs the user to acquire administrative permissions to perform system-level installations and configuration changes.
- Directs the use of
sudofor package management withaptand for executing the Docker installation script. - Includes commands to modify user group memberships (
usermod) to grant permissions for the Docker daemon. - Adjusts PowerShell execution policies (
Set-ExecutionPolicy Bypass) to allow the execution of installation scripts on Windows. - [PERSISTENCE]: Recommends modifying shell profile configurations to ensure environment settings persist across terminal sessions.
- Instructs users to append environment variable exports and
PATHmodifications to shell configuration files such as~/.bashrc. - [INDIRECT_PROMPT_INJECTION]: The skill's architecture involves ingesting project-specific requirements and configurations to generate setup steps, which establishes a potential surface for indirect injection.
- Ingestion points: The agent takes project requirements, tool versions, and database configuration details from user-provided context in
SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore instructions embedded within processed data are utilized in the provided examples.
- Capability inventory: The skill is designed to generate and provide shell commands for execution across the filesystem and network (SKILL.md).
- Sanitization: No sanitization or validation of the input requirements or project details is specified.
Audit Metadata