screen-config-apply
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard KDE Plasma system utilities including
kscreen-doctor,qdbus,kquitapp6, andkstart. These are used appropriately to inspect and modify monitor configurations as described in the skill's documentation. - [DATA_EXPOSURE_AND_EXFILTRATION]: File operations are limited to reading from a local preset directory and writing to
~/.local/share/kscreen/. This is the standard location for KDE display configuration snapshots and does not involve access to sensitive user credentials, SSH keys, or personal data. - [INDIRECT_PROMPT_INJECTION]: The skill ingests a user-provided
NAMEvariable that is interpolated into a file path for copying screen presets. While this represents a data ingestion surface, the risk is mitigated by the restricted destination directory and the specific file extension required, aligning with the primary functionality of the skill.
Audit Metadata