shell-config
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell utilities including
Bash,Grep, andGlobto audit user configuration files for suboptimal patterns, such as Bash-style variable assignments in Fish shell environments. - [DATA_EXPOSURE]: The skill reads and modifies sensitive shell startup files like
~/.zshrcand~/.config/fish/config.fish. Accessing these files is necessary for the skill to perform its intended configuration and maintenance tasks. - [PERSISTENCE]: The skill manages shell profile scripts to ensure that environment variables and tool hooks remain active across different terminal sessions, which is standard behavior for shell customization tools.
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing shell configuration files as external data, which presents a surface for indirect instructions.
- Ingestion points: Reads files from the
~/.config/fish/directory and~/.zshrcprofile. - Boundary markers: No specific delimiters are used to isolate existing file content from the agent's instructions.
- Capability inventory: The skill has access to
Bash,Write, andEdittools, allowing it to modify the shell environment. - Sanitization: The skill emphasizes syntax validation (e.g.,
fish -n) to ensure configuration correctness but does not explicitly sanitize file content for security-related injection patterns.
Audit Metadata