setup-demon-skills
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The
scripts/install-statusline.pyscript modifies thesettings.jsonfile in the agent's configuration directory (typically~/.claude/). It registers astatusLinecommand that points to thescripts/statusline.pyrenderer, ensuring the custom status line is active across agent sessions. This is the intended primary purpose of the skill. - [COMMAND_EXECUTION]: Several scripts execute local commands to perform their tasks.
scripts/install-lefthook.mjsrunsgitandlefthookto manage git hooks.scripts/statusline.pymay execute a previously configured status line command when operating in "composition" mode, sourcing the command from the user's existing settings stored insettings.jsonand a localstate.jsonfile. - [INDIRECT_PROMPT_INJECTION]: The skill's exploration phase involves reading various documentation and configuration files within the repository (e.g.,
AGENTS.md,.agents/notes/). This represents a potential surface for indirect prompt injection if those files were to contain malicious instructions. The skill mitigates this by instructing the agent to "Inspect files before editing or describing them; report only verified reading and completed work" and requiring explicit user confirmation before writing any changes.
Audit Metadata