improve-my-agent-setup
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script to execute system commands such as
git,lsof,ps, andtailscale. These executions are used to gather diagnostic metadata for the setup audit and do not involve unsanitized user input in a shell context.\n- [DATA_EXFILTRATION]: The skill scans sensitive system directories, including~/.ssh,~/.aws, and~/.azure, to identify potentially insecure configurations or secrets. The instructions explicitly require the agent to process this information locally and only report its location and type, thereby avoiding the exposure or exfiltration of actual secret values.\n- [PROMPT_INJECTION]: The skill analyzes project context files and user history transcripts (~/.claude/projects/*.jsonl). This processing of untrusted data without sanitization or boundary markers creates a surface for indirect prompt injection, particularly as the agent has local command execution and file manipulation capabilities.
Audit Metadata