windows-git-bash-paths
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [PROMPT_INJECTION]: The skill includes a 'CRITICAL GUIDELINES' section that uses strong directive language ('MANDATORY', 'NEVER', 'Priority') to override the agent's default behavior regarding file path formatting and documentation creation.
- Evidence: 'MANDATORY: Always Use Backslashes on Windows for File Paths', 'NEVER create new documentation files unless explicitly requested by the user.'
- [INDIRECT_PROMPT_INJECTION]: The skill provides shell script templates that interpolate untrusted data (environment variables like SQL_SERVER, SQL_DATABASE, and file paths) directly into shell commands. This creates a vulnerability surface for command injection if the agent generates scripts based on these templates without adding sanitization or boundary markers.
- Ingestion points: Variable interpolation in bash scripts (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: Shell execution (sqlpackage, dotnet build).
- Sanitization: Absent.
- [PERSISTENCE]: The documentation suggests modifying user shell profiles to maintain environment variables across sessions. While this is legitimate developer advice for the use case, modifying shell startup files is a recognized persistence technique.
- Evidence: 'If using Git Bash, set MSYS_NO_PATHCONV=1 in your shell profile (~/.bashrc) for SSDT work.'
Audit Metadata