setup-pstack
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The core functionality of the skill is to provide a legacy compatibility alias and automate the migration of configuration files (from
pstack-models.*toystack-models.*). These operations are local and do not involve unauthorized network access or high-privilege system modifications. - [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection by ingesting data from external files into the agent's context.
- Ingestion points: The skill reads
../setup-ystack/SKILL.mdin full and uses legacypstack-models.*files as migration input. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when reading these files.
- Capability inventory: The skill has the ability to read and write configuration files and perform capability mapping or agent spawning based on host-specific adapters.
- Sanitization: There is no evidence of input validation, filtering, or sanitization performed on the content of the ingested files.
Audit Metadata