wt-init
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies local project files (such as environment and lock files) to suggest default configuration settings.
- Ingestion points: Filenames and directory paths identified via the
Globtool. - Boundary markers: The skill matches project structure against predefined patterns rather than processing arbitrary file content.
- Capability inventory: Access to
Writeand restrictedBash(git) tools. - Sanitization: Includes a mandatory
AskUserQuestioninteraction, ensuring the user reviews and confirms the proposed configuration before any file is written. - [COMMAND_EXECUTION]: The skill executes
git check-ignoreto determine the tracking status of project files. This use of the shell is restricted togitsubcommands as specified in theallowed-toolsmetadata.
Audit Metadata