dual-boot
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts version arguments from users via the
/dual-bootcommand which are then used to modify the project's Gemfile. - Ingestion points: User-supplied version arguments in the
/dual-bootcommand (SKILL.md). - Boundary markers: No specific validation or escaping mechanisms are described for the version strings.
- Capability inventory: The skill utilizes
bundle install(which executes the Gemfile), file system operations (cp,rm,mv), and Git commands. - Sanitization: There is no instruction to sanitize or validate the version strings before they are interpolated into the Gemfile code.
- [COMMAND_EXECUTION]: The skill facilitates the use of shell commands to initialize and maintain the dual-boot environment.
- Evidence: Workflows in
workflows/setup-workflow.mdandworkflows/cleanup-workflow.mdinvolve executingbundle install,next_rails --init,grep,cp,rm,mv, andgitcommands. - Context: These commands are used for standard dependency management, configuration discovery, and file maintenance tasks necessary for the skill's primary function.
- [EXTERNAL_DOWNLOADS]: The skill adds a dependency on an external Ruby gem during the setup process.
- Evidence: The setup workflow instructs adding
gem 'next_rails'to the Gemfile. - Context: This gem is the core tool for the dual-boot methodology described and is fetched from the official RubyGems repository. It is a known tool provided by the skill's authoring organization (OmbuLabs).
Audit Metadata