agent-development
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEPERSISTENCEDATA_EXFILTRATION
Full Analysis
- [PERSISTENCE]: The skill recommends modifying shell profile files (e.g., ~/.bashrc and ~/.zshrc) to set the NODE_OPTIONS environment variable. While intended for Node.js memory management, modifying shell startup scripts is a technique used to maintain persistence across sessions.
- [DATA_EXFILTRATION]: The skill suggests a configuration pattern for .claude/settings.json that allowlists WebFetch(domain:*). This recommendation grants unrestricted network access to the agent without requiring user confirmation, which could facilitate data exfiltration if the agent interacts with untrusted content.
Audit Metadata