setup
Fail
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/bash-aliases.shappends custom code blocks to the user's~/.bashrcfile. This modification establishes a persistence mechanism that ensures custom shell functions and aliases are executed in every new terminal session. - [COMMAND_EXECUTION]: The
references/install-windows.mdfile provides PowerShell commands usingAdd-MpPreferenceto add process and folder exclusions to Windows Defender. This explicitly bypasses host security controls, reducing the effectiveness of antivirus protection and increasing the system's vulnerability. - [PROMPT_INJECTION]: Multiple configuration files (
references/alias-definitions.sh,scripts/bash-aliases.sh,references/bashrc-claude.sh) define aliases such asclaude-yoloandclaude-opus-yolowhich employ the--dangerously-skip-permissionsflag. These aliases are designed to override the agent's safety protocols and bypass user confirmation requirements for tool execution.
Recommendations
- AI detected serious security threats
Audit Metadata