setup-environment
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution with Administrative Privileges]: The skill is designed to automate the installation of development tools using system package managers such as
apt-get,dnf,yum, andpacman. Many of these instructions are prefixed withsudo, which executes commands with elevated administrative permissions. - [Indirect Prompt Injection Surface]: The skill relies on instructions parsed from local repository files like
README.mdandCONTRIBUTING.md. Because the agent executes logic based on the content of these files, there is a possibility that a repository containing specialized or misleading instructions could influence the agent's behavior during the setup process. - [Automated Command Execution]: The guidelines specify that the agent should execute commands directly rather than displaying them for user approval. This workflow minimizes human-in-the-loop review for system-level changes, though the skill does include a provision to notify users when interaction is typically required.
- [System Configuration Changes]: The skill attempts to modify the system
PATHenvironment variable. While it suggests starting with session-based changes, it eventually moves to permanent modifications, which can affect the long-term stability and security of the host environment if incorrect paths are added.
Audit Metadata