multi-harness-portability

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill includes a SkillInstaller utility that processes external skill files and interpolates their content into platform-specific configuration files (e.g., CLAUDE.md, .cursor/rules/).
  • Ingestion points: The parse_skill method in the implementation section reads markdown content from user-provided file paths.
  • Boundary markers: No explicit delimiters or boundary markers are used when appending instructions to the target configuration files.
  • Capability inventory: The script utilizes file system operations including mkdir and write_text to manage configuration files across different project directories.
  • Sanitization: The script extracts sections using string splitting and writes the extracted text directly to the target files without sanitization.
  • [COMMAND_EXECUTION]: The skill provides example shell scripts and Python utilities for environment detection and file management. These operations are restricted to standard local platform detection and directory organization tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 10:33 AM