generate-run-commands
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Configuration: The skill automates the creation of VS Code tasks by writing to
.vscode/tasks.json. These tasks define shell commands that can be executed within the session, which is standard behavior for development-oriented agents. - Automated Persistence: It supports configuring tasks to run automatically upon workspace creation (
runOn: worktreeCreated). This is a legitimate feature for ensuring dependencies are installed, though it establishes persistent execution patterns in the workspace configuration. - Workspace Data Ingestion: The skill analyzes project manifests like
package.jsonandMakefileto infer commands. This capability relies on the content of these files; in environments with untrusted code, this could lead to the generation of unintended task configurations. The skill attempts to mitigate ambiguity by prompting the user when commands are not clearly defined.
Audit Metadata