dotfiles-config
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by reading configuration from
.claude/dotfiles.local.mdin the current working directory. - Ingestion points: Settings are read from
.claude/dotfiles.local.md(project-scoped) and~/.claude/dotfiles.local.md(global) in SKILL.md. - Boundary markers: None. The skill parses YAML frontmatter using
awkandgrepwithout explicit instructions to ignore embedded prompts in the values. - Capability inventory: The skill uses
awk,grep, andchezmoivia shell execution. It returns a verified directory path that subsequent skills use for dotfiles operations (reading/writing to the system). - Sanitization: The skill validates that the resolved path exists and contains Chezmoi-specific markers (
.chezmoirootorhome/directory).
Audit Metadata