peon-ping-use
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands to manage session-specific voice settings. It executes a helper script (
peon.sh) viabashto list available packs and uses standard utilities likecatandechoto read environment variables (CLAUDE_SESSION_ID) and configuration files within the user's home directory (~/.claude/hooks/peon-ping/). - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied voice pack names to update configuration files. While this creates an input surface, the instructions specifically direct the agent to validate requested packs against the installed list before modifying
config.jsonor.state.json. - [SAFE]: All operations are scoped to the vendor's specific application directories and are necessary for the skill's primary purpose of session configuration. No external network activity or sensitive system file access was detected.
Audit Metadata