eval-hooks
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from configuration files and external scripts which could contain malicious instructions designed to mislead the agent or influence its behavior during the audit.
- Ingestion points: The skill reads
~/.claude/settings.json,.claude/settings.json, and various script files referenced within these configurations as described in Step 1 and Step 3. - Boundary markers: The instructions do not specify the use of clear delimiters or 'ignore' instructions when processing or displaying content from these untrusted sources.
- Capability inventory: The skill has access to
Read,Glob,Bash, andEdittools, allowing it to inspect the filesystem, run commands for verification, and modify configuration files. - Sanitization: No specific sanitization, validation, or escaping of the content found in hook commands or script files is performed before processing.
Audit Metadata