multi-harness-portability
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a
SkillInstallerutility that processes external skill files and interpolates their content into platform-specific configuration files (e.g.,CLAUDE.md,.cursor/rules/). - Ingestion points: The
parse_skillmethod in the implementation section reads markdown content from user-provided file paths. - Boundary markers: No explicit delimiters or boundary markers are used when appending instructions to the target configuration files.
- Capability inventory: The script utilizes file system operations including
mkdirandwrite_textto manage configuration files across different project directories. - Sanitization: The script extracts sections using string splitting and writes the extracted text directly to the target files without sanitization.
- [COMMAND_EXECUTION]: The skill provides example shell scripts and Python utilities for environment detection and file management. These operations are restricted to standard local platform detection and directory organization tasks.
Audit Metadata