Command Development
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [SAFE]: The skill is entirely educational, providing documentation and examples for command development. It emphasizes safety best practices such as least privilege using
allowed-toolsand descriptive frontmatter for user transparency. - [DYNAMIC_CONTEXT_INJECTION]: The skill documents the platform-specific syntax for executing shell commands at runtime. All occurrences are within markdown code blocks intended as developer examples (e.g.,
git status,npm test,gh pr view) and are not executable in the context of the skill itself. - [INDIRECT_PROMPT_INJECTION]: Guidance is provided on using dynamic arguments. The documentation includes specific remediation strategies for validating these inputs via shell scripts and conditional prompt logic to ensure they do not result in unintended agent behavior.
- [PRIVILEGE_ESCALATION]: Static analysis hits for system commands in the testing reference were confirmed to be false positives. The
ddandrmcommands are examples for creating large test files and performing local cleanup in a test environment.
Audit Metadata