shell-config

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell utilities including Bash, Grep, and Glob to audit user configuration files for suboptimal patterns, such as Bash-style variable assignments in Fish shell environments.
  • [DATA_EXPOSURE]: The skill reads and modifies sensitive shell startup files like ~/.zshrc and ~/.config/fish/config.fish. Accessing these files is necessary for the skill to perform its intended configuration and maintenance tasks.
  • [PERSISTENCE]: The skill manages shell profile scripts to ensure that environment variables and tool hooks remain active across different terminal sessions, which is standard behavior for shell customization tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes existing shell configuration files as external data, which presents a surface for indirect instructions.
  • Ingestion points: Reads files from the ~/.config/fish/ directory and ~/.zshrc profile.
  • Boundary markers: No specific delimiters are used to isolate existing file content from the agent's instructions.
  • Capability inventory: The skill has access to Bash, Write, and Edit tools, allowing it to modify the shell environment.
  • Sanitization: The skill emphasizes syntax validation (e.g., fish -n) to ensure configuration correctness but does not explicitly sanitize file content for security-related injection patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 08:54 PM
Security Audit — agent-trust-hub — shell-config