configure-agent-pr-attestation
Warn
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATIONDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several shell-based workflows to verify tool existence, generate configuration files, and manage cryptographic keys using standard tools like jq, git, and cosign.
- [PERSISTENCE]: Configures a PostToolUse hook in the .claude/settings.json file, which ensures that a custom attestation script is executed automatically after every future tool operation in the agent's environment.
- [PRIVILEGE_ESCALATION]: Recommends the use of sudo to move the harness-scs binary to /usr/local/bin/, a system-level directory requiring administrative privileges for installation.
- [DATA_EXFILTRATION]: The generated hook script is designed to capture the agent's full session transcript and commit SHA, uploading this data to the Harness Evidence Vault as part of its attestation process.
- [DYNAMIC_EXECUTION]: Programmatically assembles and writes an executable bash script (.claude/hooks/agent-pr-attestation.sh) using local user inputs and then grants it execution permissions via chmod +x.
Audit Metadata