configuring-zsh
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill's primary function is the modification of Zsh startup files (e.g., .zshrc, .zprofile, .zshenv). These files are standard locations for establishing persistence on Unix-like systems.
- [COMMAND_EXECUTION]: The instructions require the agent to execute shell validation commands such as 'zsh -n', 'zsh -ic', and 'zsh -lc' against the modified configuration files. This results in the execution of the shell with potentially untrusted or modified code.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on shell configurations and plugins retrieved from dotfiles repositories, which may contain instructions that could influence the agent's behavior during editing or validation.
- Ingestion points: Local and repository-based Zsh configuration files specified in SKILL.md.
- Boundary markers: None implemented for the ingestion of file content.
- Capability inventory: Execution of 'zsh' subprocesses for validation and command checking (SKILL.md).
- Sanitization: Uses syntax validation ('zsh -n') but executes the modified configuration directly during functional testing.
Audit Metadata