setup-environment

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Command Execution with Administrative Privileges]: The skill is designed to automate the installation of development tools using system package managers such as apt-get, dnf, yum, and pacman. Many of these instructions are prefixed with sudo, which executes commands with elevated administrative permissions.
  • [Indirect Prompt Injection Surface]: The skill relies on instructions parsed from local repository files like README.md and CONTRIBUTING.md. Because the agent executes logic based on the content of these files, there is a possibility that a repository containing specialized or misleading instructions could influence the agent's behavior during the setup process.
  • [Automated Command Execution]: The guidelines specify that the agent should execute commands directly rather than displaying them for user approval. This workflow minimizes human-in-the-loop review for system-level changes, though the skill does include a provision to notify users when interaction is typically required.
  • [System Configuration Changes]: The skill attempts to modify the system PATH environment variable. While it suggests starting with session-based changes, it eventually moves to permanent modifications, which can affect the long-term stability and security of the host environment if incorrect paths are added.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:52 PM
Security Audit — agent-trust-hub — setup-environment