gentleman-installer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides code patterns for executing system commands via package managers like brew, pacman, and pkg to install software as part of the installation flow.
- [PRIVILEGE_ESCALATION]: The skill includes patterns for using sudo via system.RunSudoWithLogs to perform administrative tasks, which is required for system-wide package installation on certain platforms.
- [PERSISTENCE]: The skill documents methods for modifying user shell configuration files, such as config.fish, to apply persistent dotfile settings and environment configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a framework that ingests user choices to dynamically determine installation steps and execute commands, creating a potential surface for injection if user inputs are not properly sanitized. 1. Ingestion points: User preferences stored in m.Choices and system data in m.SystemInfo (referenced in SetupInstallSteps and stepInstallTool). 2. Boundary markers: None explicitly defined in the provided code templates. 3. Capability inventory: Subprocess execution (system.RunSudoWithLogs), file system writes (system.CopyDir), and shell patching (system.PatchFishForWM). 4. Sanitization: The templates demonstrate hardcoded command strings and path construction without explicit validation or escaping of dynamic inputs.
- [EXTERNAL_DOWNLOADS]: The skill provides patterns for downloading and installing software using well-known package managers such as Homebrew and Pacman.
Audit Metadata