setup

Fail

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/bash-aliases.sh appends custom code blocks to the user's ~/.bashrc file. This modification establishes a persistence mechanism that ensures custom shell functions and aliases are executed in every new terminal session.
  • [COMMAND_EXECUTION]: The references/install-windows.md file provides PowerShell commands using Add-MpPreference to add process and folder exclusions to Windows Defender. This explicitly bypasses host security controls, reducing the effectiveness of antivirus protection and increasing the system's vulnerability.
  • [PROMPT_INJECTION]: Multiple configuration files (references/alias-definitions.sh, scripts/bash-aliases.sh, references/bashrc-claude.sh) define aliases such as claude-yolo and claude-opus-yolo which employ the --dangerously-skip-permissions flag. These aliases are designed to override the agent's safety protocols and bypass user confirmation requirements for tool execution.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 24, 2026, 06:17 PM
Security Audit — agent-trust-hub — setup