setup-engineering

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the execution of a bash script (scripts/install-machinery.sh) to set up the repository environment. This script performs file operations, installs hook scripts, and modifies local project settings using tools like jq and awk.
  • [PERSISTENCE]: The skill installs a persistent SessionStart hook in the repository's .claude/settings.json file. This mechanism ensures that specific engineering context and instructions (found in assets/hooks/session-start-context.md) are automatically injected into the agent's prompt whenever a new session begins within the project.
  • [PRIVILEGE_ESCALATION]: The installation script applies chmod +x to the newly installed session hook script. This is a standard and necessary permission change to enable the platform's hook execution functionality and is limited to the skill's own assets.
  • [PROMPT_INJECTION]: The skill includes instructions in assets/mandate.md that use <EXTREMELY_IMPORTANT> tags to influence agent behavior. These instructions direct the agent to prioritize specific project-native tools and styles for engineering tasks. While these are intentional behavioral overrides for the Patina engineering style, they are part of the skill's documented setup purpose and do not attempt to bypass safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 10:13 AM