setup-devcontainer
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes the official installation script for Claude Code from the claude.ai domain.
- Evidence:
curl -fsSL https://claude.ai/install.sh | shinSKILL.md. - [COMMAND_EXECUTION]: Utilizes various
gitpodCLI commands to manage workspace lifecycle, including project creation, secret configuration, and environment testing. - Evidence: Commands such as
gitpod project create,gitpod project secret set, andgitpod environment sshare described in Phase 2 and Phase 3 ofSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data by scanning repository files to detect the tech stack.
- Ingestion points: Reads local files such as
package.json,Gemfile, andcomposer.jsonin Phase 1.1 ofSKILL.mdto identify frameworks and databases. - Boundary markers: No specific delimiters are defined for reading these repository files.
- Capability inventory: The skill has access to shell execution (
Bash), file writing (Write), and network-capable CLI tools (gitpod). - Sanitization: No explicit sanitization or filtering of the file contents is mentioned before framework detection logic is applied.
Audit Metadata