skills/shpigford/chops/setup/Gen Agent Trust Hub

setup

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user to run common development commands such as sw_vers, xcode-select, brew install, xcodegen generate, and xcodebuild. These are standard tools for macOS software development.\n- [EXTERNAL_DOWNLOADS]: Directs the user to the official Homebrew website (https://brew.sh) if the package manager is missing from the system.\n- [INDIRECT_PROMPT_INJECTION]: The documentation identifies that the application being developed (Chops) scans directories containing external instructions (e.g., ~/.claude/skills/). This constitutes a potential attack surface for indirect prompt injection within the resulting application's runtime, though the setup guide itself does not execute or process this external data.\n- [PRIVILEGE_ESCALATION]: Explicitly informs the developer that the application runs without a sandbox to allow unrestricted filesystem access for reading dotfiles. While this describes a high-privilege application, it is disclosed as a design requirement for the tool's functionality rather than an attempt to covertly escalate permissions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 11:47 AM