wt-init

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies local project files (such as environment and lock files) to suggest default configuration settings.
  • Ingestion points: Filenames and directory paths identified via the Glob tool.
  • Boundary markers: The skill matches project structure against predefined patterns rather than processing arbitrary file content.
  • Capability inventory: Access to Write and restricted Bash (git) tools.
  • Sanitization: Includes a mandatory AskUserQuestion interaction, ensuring the user reviews and confirms the proposed configuration before any file is written.
  • [COMMAND_EXECUTION]: The skill executes git check-ignore to determine the tracking status of project files. This use of the shell is restricted to git subcommands as specified in the allowed-tools metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 01:11 AM