setup-engineering
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of a bash script (
scripts/install-machinery.sh) to set up the repository environment. This script performs file operations, installs hook scripts, and modifies local project settings using tools likejqandawk. - [PERSISTENCE]: The skill installs a persistent
SessionStarthook in the repository's.claude/settings.jsonfile. This mechanism ensures that specific engineering context and instructions (found inassets/hooks/session-start-context.md) are automatically injected into the agent's prompt whenever a new session begins within the project. - [PRIVILEGE_ESCALATION]: The installation script applies
chmod +xto the newly installed session hook script. This is a standard and necessary permission change to enable the platform's hook execution functionality and is limited to the skill's own assets. - [PROMPT_INJECTION]: The skill includes instructions in
assets/mandate.mdthat use<EXTREMELY_IMPORTANT>tags to influence agent behavior. These instructions direct the agent to prioritize specific project-native tools and styles for engineering tasks. While these are intentional behavioral overrides for the Patina engineering style, they are part of the skill's documented setup purpose and do not attempt to bypass safety filters.
Audit Metadata