skills/hkuds/clawteam/clawteam-dev/Gen Agent Trust Hub

clawteam-dev

Warn

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: MEDIUMPERSISTENCEDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [PERSISTENCE]: The scripts/bootstrap_clawteam_dev.sh script modifies the user's shell profile (~/.bashrc) to inject a shell function named clawteam(). This ensures that the developer tools remain active and available across different terminal sessions.
  • [DYNAMIC_EXECUTION]: The skill uses multiple dynamic code generation techniques:
  • It uses a bash heredoc to write a new executable script to ~/.local/bin/clawteam.
  • It executes an inline Python script using a heredoc (`python
  • <<'PY') to programmatically edit the .bashrc` file.
  • [COMMAND_EXECUTION]: The skill executes several high-level commands and scripts to manage the local environment:
  • It runs bash scripts/bootstrap_clawteam_dev.sh and bash scripts/link_local_clawteam_skills.sh which perform file system operations and environment changes.
  • It utilizes uv pip install to perform an editable installation of the local repository with development dependencies (-e ".[dev]").
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 9, 2026, 09:48 AM