setup-ystack
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
python3 scripts/validate_model_override.pyto validate generated configurations against a schema. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it ingests and processes data from potentially untrusted files in the project or user environment.
- Ingestion points: Reads data from
capability-contract.md,model-override.schema.json, and legacy files likepstack-models.mdcorcodex-pstack-models.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the contents of these ingested files as data rather than instructions.
- Capability inventory: The skill possesses the ability to read and write files in user configuration directories and execute local scripts.
- Sanitization: The skill attempts to mitigate risks by validating the final configuration against a schema using a local script before writing it to disk.
Audit Metadata