skills/kriscard/skills/shell-env/Gen Agent Trust Hub

shell-env

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell commands like stow, zsh, tmux, and yabai to manage symbolic links and reload configurations. These operations are essential to the skill's stated purpose of environment management.
  • [PERSISTENCE_MECHANISMS]: The skill is designed to modify shell startup files (e.g., .zshrc) and modular configuration scripts in ~/.dotfiles to ensure user environment settings persist across terminal sessions.
  • [DYNAMIC_EXECUTION]: The documentation includes standard initialization patterns such as eval "$(zoxide init zsh)" and the execution of the Tmux Plugin Manager (tpm). These are conventional methods for setting up well-known, legitimate developer tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading existing dotfiles to inspect current configurations.
  • Ingestion points: SKILL.md (config inspection step), references/git-config.md (identity patterns).
  • Boundary markers: Absent.
  • Capability inventory: File system writing and shell command execution (stow, zsh, etc.).
  • Sanitization: Absent.
  • While the skill processes potentially untrusted local file data, the behavior is within the normal scope of a configuration management tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 12:38 AM
Security Audit — agent-trust-hub — shell-env