shell-env
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands like
stow,zsh,tmux, andyabaito manage symbolic links and reload configurations. These operations are essential to the skill's stated purpose of environment management. - [PERSISTENCE_MECHANISMS]: The skill is designed to modify shell startup files (e.g.,
.zshrc) and modular configuration scripts in~/.dotfilesto ensure user environment settings persist across terminal sessions. - [DYNAMIC_EXECUTION]: The documentation includes standard initialization patterns such as
eval "$(zoxide init zsh)"and the execution of the Tmux Plugin Manager (tpm). These are conventional methods for setting up well-known, legitimate developer tools. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading existing dotfiles to inspect current configurations.
- Ingestion points:
SKILL.md(config inspection step),references/git-config.md(identity patterns). - Boundary markers: Absent.
- Capability inventory: File system writing and shell command execution (
stow,zsh, etc.). - Sanitization: Absent.
- While the skill processes potentially untrusted local file data, the behavior is within the normal scope of a configuration management tool.
Audit Metadata