dual-boot

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts version arguments from users via the /dual-boot command which are then used to modify the project's Gemfile.
  • Ingestion points: User-supplied version arguments in the /dual-boot command (SKILL.md).
  • Boundary markers: No specific validation or escaping mechanisms are described for the version strings.
  • Capability inventory: The skill utilizes bundle install (which executes the Gemfile), file system operations (cp, rm, mv), and Git commands.
  • Sanitization: There is no instruction to sanitize or validate the version strings before they are interpolated into the Gemfile code.
  • [COMMAND_EXECUTION]: The skill facilitates the use of shell commands to initialize and maintain the dual-boot environment.
  • Evidence: Workflows in workflows/setup-workflow.md and workflows/cleanup-workflow.md involve executing bundle install, next_rails --init, grep, cp, rm, mv, and git commands.
  • Context: These commands are used for standard dependency management, configuration discovery, and file maintenance tasks necessary for the skill's primary function.
  • [EXTERNAL_DOWNLOADS]: The skill adds a dependency on an external Ruby gem during the setup process.
  • Evidence: The setup workflow instructs adding gem 'next_rails' to the Gemfile.
  • Context: This gem is the core tool for the dual-boot methodology described and is fetched from the official RubyGems repository. It is a known tool provided by the skill's authoring organization (OmbuLabs).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 02:43 AM