setup

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform system environment checks (e.g., uname, python3 --version), create Python virtual environments, and execute installation commands for dependencies.
  • [EXTERNAL_DOWNLOADS]: Orchestrates the retrieval of software packages through the Python package manager (pip) and downloads web browser binaries using the Playwright framework.
  • [DYNAMIC_EXECUTION]: Employs the python3 -c command to execute encapsulated Python logic for verifying package installations and comparing environment state against configuration files.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads and evaluates the content of the requirements.txt file located within the plugin's root directory to check for version drift. 1. Ingestion points: ${CLAUDE_PLUGIN_ROOT}/requirements.txt (SKILL.md). 2. Boundary markers: None. 3. Capability inventory: Bash tool used to execute pip and playwright commands. 4. Sanitization: The logic performs basic string filtering and splitting on the requirements file content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 03:13 AM