dotfiles-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md requires running dotfiles inspect chezmoi-diff and presenting an enriched drift report, which implies ingesting free-form diff content from the outsider-authored chezmoi remote repo (git-tracked content under $HOME/.local/share/chezmoi) into the agent’s LLM context.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs the agent to run dotfiles/chezmoi commands (re-add, forget --force, apply --force, sync, git commit/merge/push) and to execute/inspect scripts that can have side effects, which will modify the user's home state and potentially run dangerous actions on the machine.