Skills
Navigate
skills/danielrosehill/claude-kde-plasma-plugin/kwin-scripting/Gen Agent Trust Hub

kwin-scripting

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilize standard KDE utilities kpackagetool5/6 and qdbus/6 to manage window manager scripts on the local system. These operations are intended for desktop customization and management.\n- [DYNAMIC_EXECUTION]: Documents how to load and run JavaScript files within the KWin process using the DBus loadScript interface. This is a standard functionality for KWin development and dynamic script testing.\n- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection via untrusted local script files.\n
  • Ingestion points: Local file paths for .kwinscript and .js files passed to install and load commands in SKILL.md.\n
  • Boundary markers: Absent.\n
  • Capability inventory: Subprocess execution of kpackagetool and script execution within the window manager via qdbus.\n
  • Sanitization: Absent; the skill relies on the agent to validate file sources and contents before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 10:45 PM