live-dev-init
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell and PowerShell scripts provided within the skill package (scripts/install-git-gh-macos.command and scripts/install-git-gh-windows.ps1) to manage tool installation and environment setup.
- [EXTERNAL_DOWNLOADS]: The skill downloads Gitleaks binaries using curl when standard package managers like Homebrew or Winget are unavailable. It also pulls well-known development tools including vercel and firebase-tools from the npm registry.
- [PERSISTENCE_MECHANISMS]: To maintain accessibility to installed tools, the skill modifies system-level configurations. On macOS, it appends directory paths to shell initialization files. On Windows, it uses the setx command to persistently modify the user's PATH environment variable.
- [INDIRECT_PROMPT_INJECTION]: The skill reads external configuration data from files like .nvmrc and catalog.json to determine environment settings.
- Ingestion points: .nvmrc file and scripts/toolchain/catalog.json.
- Boundary markers: Not explicitly defined for the interpolation of these values into the agent context.
- Capability inventory: The skill possesses file write access and shell execution capabilities.
- Sanitization: No explicit validation or escaping is documented for the values extracted from these configuration files.
- [SAFE]: The skill includes a 'Secret Vault Policy' as a core function. It proactively scans and modifies .gitignore files to ensure that sensitive files, such as .env files and service account credentials, are not accidentally committed to version control.
Audit Metadata