dev-env
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts such as
scripts/dev-worktree.shviapnpm dev:worktreeto coordinate starting multiple services (web and workers) within a git worktree. It also uses standard CLI tools likelsof,grep, andseqfor process management and readiness checks. - [EXTERNAL_DOWNLOADS]: The skill performs dependency installation using
pnpm installand suggests running a Docker container (docker run -p 7700:7700 getmeili/meilisearch:v1.41.0) to provide search capabilities. These are standard development operations for the Karakeep project. - [DYNAMIC_EXECUTION]: The environment setup process involves generating
.envfiles with randomized secrets and performing database migrations usingnode --import tsx. These actions are performed to ensure each worktree has a unique, isolated configuration. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to monitor log files located in
$TMPDIRand interact with a locally running web application via browser automation. While these are ingestion points for external data, they represent standard development workflows with no evidence of malicious intent.
Audit Metadata