configure-ecc
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads project source code by cloning the repository at
https://github.com/Jamkris/everything-gemini-code.gitto a temporary directory. This is used as the source for the installation process. - [COMMAND_EXECUTION]: The skill executes standard filesystem commands to manage the installation, including
rmfor cleanup,mkdirto create configuration directories, andcpto install the selected skills and rules to~/.gemini/or.gemini/directories. It also useslsandgrepto verify the installation and check for path consistency. - [DATA_EXPOSURE]: The skill reads and scans files within the user's
~/.gemini/and local.gemini/directories. This activity is focused on verifying that the installed skills and rules are correctly configured and identifying any broken internal references. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by installing markdown instructions from a remote source and editing them based on user input.
- Ingestion points: Content is ingested from the
Jamkris/everything-gemini-coderepository (SKILL.md) and via user responses toAskUserQuestion(SKILL.md). - Boundary markers: No explicit delimiter or 'ignore' instructions are used when interpolating user choices into file edits.
- Capability inventory: The skill has capabilities for shell command execution (
rm,git clone,mkdir,cp,ls,grep) and in-place file editing (SKILL.md). - Sanitization: The skill modifies local
.mdfiles based on user-provided tech stack preferences and optimization choices.
Audit Metadata