afk-setup
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script,
scripts/init-afk.sh, to resolve repository paths and update the configuration file. It invokesgit rev-parseandnodeas part of its normal operation. - [PROMPT_INJECTION]: The skill's setup process (/afk-setup) is an ingestion point for external and user-provided data. * Ingestion points: Repository information from Git commands and user configuration choices. * Boundary markers: No explicit markers are used to delimit external data from instruction blocks during the gathering phase. * Capability inventory: The skill can write to specific local configuration files via the registration script. * Sanitization: The implementation uses environment variables to pass data into the JavaScript logic, which prevents direct injection into the code string being executed.
Audit Metadata