shell-env
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system commands to manage and verify configurations, including
stowfor symlink management,zsh -nfor shell script validation,tmux sourcefor reloading terminal configurations, andyabai --restart-servicefor window management control. These commands are executed as part of the intended administrative workflow. - [DYNAMIC_EXECUTION]: The instructions include standard shell initialization patterns such as
eval "$(zoxide init zsh)"for the zoxide navigation tool and the execution of the Tmux Plugin Manager (tpm) script. These patterns are common practices for integrating these tools into the shell environment. - [INDIRECT_PROMPT_INJECTION]: The skill presents an inherent surface for indirect prompt injection as it facilitates the modification of shell startup files based on external input.
- Ingestion points: Instructions to edit source configuration files within the
~/.dotfilesdirectory (e.g.,.zshrc,tmux.conf,.gitconfig) based on user requests. - Boundary markers: The skill does not define specific delimiters or provide explicit instructions to the agent to sanitize or ignore potentially malicious commands embedded within the configuration content.
- Capability inventory: The skill possesses capabilities for file system management (
stow,mkdir,find) and shell command execution (zsh,tmux,yabai). - Sanitization: There is no mention of sanitizing or validating the configuration data before it is written to the target files, relying on the user's intent.
Audit Metadata