setup-pi
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill modifies shell startup files (~/.bashrc or ~/.zshrc) to add persistent functions, ensuring the code is available in future terminal sessions.
- [COMMAND_EXECUTION]: The installed shell functions execute git commands and an external 'pi' command. The 'piw-clean' function includes a forced removal operation (git worktree remove --force) which can lead to data loss if uncommitted changes exist.
- [INDIRECT_PROMPT_INJECTION]: The skill reads existing user shell configuration files to detect current definitions, creating a surface where untrusted local file content is ingested into the agent's context.
- Ingestion points: Reading of ~/.bashrc or ~/.zshrc in SKILL.md.
- Boundary markers: None implemented for file reading.
- Capability inventory: File system writing and shell command execution.
- Sanitization: None implemented for the read configuration data.
Audit Metadata