cachyos-pacstrap
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains authoritative instructions designed to control agent behavior and context. It specifies that the skill "MUST be invoked" before the agent is allowed to read source code or launch other agents. This pattern is used to ensure the agent adopts a specific operational state or bias before proceeding with further tasks.
- [COMMAND_EXECUTION]: The documentation provides specific command-line instructions for the 'charly' tool (
charly -C box/cachyos box build cachyos-pacstrap) and references a 'privileged builder' environment. While these commands are central to the skill's stated purpose of OS bootstrapping, they involve high-privilege operations.
Audit Metadata