configure

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform routine environment management tasks. This includes creating the plugin's configuration directory (~/.bitwize-music/), backing up existing configuration files to config.yaml.bak, and deleting the configuration file upon a user-initiated reset. These actions are transparently documented and occur entirely within the user's home directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user input via the AskUserQuestion tool and command arguments to populate the config.yaml file. While this ingestion of untrusted data (such as artist names or custom paths) into a persistent file creates a theoretical surface for indirect prompt injection, the risk is mitigated by the structured YAML format and the interactive human-in-the-loop workflow required to update the settings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:12 PM