book-installer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several utility scripts for managing textbook infrastructure.
scripts/detect_features.pyscans project configuration using standard libraries.scripts/generate-favicon.pyuses the Pillow library to process image files.scripts/analyze-reading-levels.pyevaluates text complexity using the textstat library.references/kanban-board.mdandreferences/google-analytics.mdprovide workflows for using official CLI tools likeghandgitto manage project metadata.- [EXTERNAL_DOWNLOADS]: The skill references and downloads resources from established and well-known services.
- Fetches JS/CSS libraries (KaTeX, MathJax, vis-network, Giscus) from
unpkg.com,jsdelivr.net, andgiscus.app. - Downloads an author headshot from the author's GitHub Pages domain
dmccreary.github.io. - Recommends installation of standard, established Python packages from PyPI (e.g.,
mkdocs-material,Pillow,textstat). - [PERSISTENCE]: The optional skill-tracker feature modifies the local agent environment for usage analytics.
- Installs hooks in
~/.claude/hooks/and updates~/.claude/settings.jsonto log tool usage patterns across sessions, which is its stated purpose. - [DYNAMIC_EXECUTION]: Contains a dynamic module import in the favicon generation utility.
scripts/generate-favicon.pyuses__import__to load thePIL.Imagemodule for image processing, which is a benign use of the pattern for asset creation.- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect injection by processing project-specific data files.
- Ingests content from
docs/course-description.mdandlearning-graph.jsonto generate textbook content (glossaries, FAQs, etc.). - While the skill has file-writing capabilities, the data ingestion is part of the intended static site generation workflow.
Audit Metadata