quickshell-modules
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the user's local file system which could potentially contain malicious instructions.
- Ingestion points: Reads configuration and documentation files from
~/dotfiles/.config/quickshell/, includingAGENTS.md,Colors.qml, andcolors.css. - Boundary markers: No specific boundary markers or instructions to disregard embedded commands in these files are present.
- Capability inventory: The skill can execute shell commands (
quickshell,hyprctl,git,pkill,setsid), run Python code, and open local files in the browser viaxdg-open. - Sanitization: There is no explicit sanitization process for the data read from the local configuration files.
- [COMMAND_EXECUTION]: The skill uses multiple shell commands to manage the Quickshell environment and verify the integrity of the user's desktop configuration.
- Evidence: Uses
pkill -x quickshell,setsid quickshell,hyprctl reload, andgit apply --cachedto manage processes, reload compositor rules, and stage code changes. - Purpose: These commands are standard for the development and lifecycle management of the targeted desktop environment components.
- [DYNAMIC_EXECUTION]: The skill generates and executes code dynamically at runtime for the purpose of UI design and verification.
- UI Prototyping: Creates temporary HTML/CSS/JS files in
/tmp/ui-options/and automatically opens them in the user's browser usingxdg-openfor manual verification. - Runtime Injection: Injects a custom JavaScript
dumpUifunction into the running Quickshell environment through an IPC call to inspect the live item tree. - Scripting: Executes a Python one-liner utilizing the
fontToolslibrary to verify the presence and names of font glyphs in system font files.
Audit Metadata