claude-cli-runtime
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents how to authorize and execute shell commands using the
claudeCLI's tool-calling capabilities, specifically facilitatingBashcommands forgitandnpmtasks. - [PROMPT_INJECTION]: The skill describes a method for piping external data, such as
git diffoutput, into the agent context viastdin. This establishes an ingestion point for untrusted data. Boundary markers are deferred to an 'active workspace authority contract' that governs external actions. The capability inventory includesRead,Grep,Glob, andBashshell access. No specific sanitization or filtering of the interpolated data is described within the skill instructions.
Audit Metadata