agent-config-audit
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
BashandTasktools to execute commands for workspace discovery and rule auditing, which is consistent with its stated purpose of managing configuration files.- [PROMPT_INJECTION]: The skill reads content from various workspace configuration files (such asCLAUDE.mdand.cursorrules) that could contain malicious instructions designed to influence the agent's auditing logic. - Ingestion points: All config files found during the discovery phase (Step 1) are processed using
Read,Glob, andGreptools. - Boundary markers: There are no specific instructions or delimiters used to isolate the ingested file content from the agent's own instructional context.
- Capability inventory: The skill defines the use of
Write,Edit,Bash, andTasktools, which could be misused if the agent obeys instructions found within audited files. - Sanitization: No sanitization or validation logic is present to filter content before it is processed by the agent.
Audit Metadata