environment-setup-guide

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads installation scripts from well-known technology services to facilitate the setup of developer tooling.
  • Fetches the Homebrew installation script from the official GitHub repository at https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh.
  • Downloads the Docker installation script from the official domain at https://get.docker.com.
  • Fetches the Nodesource setup script for Node.js from https://deb.nodesource.com/setup_20.x.
  • Downloads the Chocolatey installation script for Windows from https://community.chocolatey.org/install.ps1.
  • [COMMAND_EXECUTION]: Provides comprehensive templates for executing shell and PowerShell commands to manage software installations and environment verification.
  • Includes usage of package managers such as brew, apt, choco, npm, and pip.
  • Details the execution of system commands for process identification (lsof) and process termination (kill).
  • Provides a setup.sh bash script template that automates dependency installation and environment initialization.
  • [PRIVILEGE_ESCALATION]: Instructs the user to acquire administrative permissions to perform system-level installations and configuration changes.
  • Directs the use of sudo for package management with apt and for executing the Docker installation script.
  • Includes commands to modify user group memberships (usermod) to grant permissions for the Docker daemon.
  • Adjusts PowerShell execution policies (Set-ExecutionPolicy Bypass) to allow the execution of installation scripts on Windows.
  • [PERSISTENCE]: Recommends modifying shell profile configurations to ensure environment settings persist across terminal sessions.
  • Instructs users to append environment variable exports and PATH modifications to shell configuration files such as ~/.bashrc.
  • [INDIRECT_PROMPT_INJECTION]: The skill's architecture involves ingesting project-specific requirements and configurations to generate setup steps, which establishes a potential surface for indirect injection.
  • Ingestion points: The agent takes project requirements, tool versions, and database configuration details from user-provided context in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions to ignore instructions embedded within processed data are utilized in the provided examples.
  • Capability inventory: The skill is designed to generate and provide shell commands for execution across the filesystem and network (SKILL.md).
  • Sanitization: No sanitization or validation of the input requirements or project details is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 08:43 AM