skills/otrebu/skills/favorite-harness/Gen Agent Trust Hub

favorite-harness

Fail

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill contains multiple bash command templates intended for use when launching coding agents.
  • [PRIVILEGE_ESCALATION]: The provided command templates include flags that intentionally bypass security controls and isolation mechanisms:
  • The Claude harness is configured with --dangerously-skip-permissions, which removes standard permission checks.
  • The Cursor Agent harness is configured with --sandbox disabled, which removes process isolation protections.
  • [PROMPT_INJECTION]: The skill provides instructions that technically implement safety filter bypasses by requiring the use of flags such as --yolo and --approve-for-me, which disable user oversight and auto-approve potentially destructive actions.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 23, 2026, 10:54 AM