setup
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to run common development commands such as
sw_vers,xcode-select,brew install,xcodegen generate, andxcodebuild. These are standard tools for macOS software development.\n- [EXTERNAL_DOWNLOADS]: Directs the user to the official Homebrew website (https://brew.sh) if the package manager is missing from the system.\n- [INDIRECT_PROMPT_INJECTION]: The documentation identifies that the application being developed (Chops) scans directories containing external instructions (e.g.,~/.claude/skills/). This constitutes a potential attack surface for indirect prompt injection within the resulting application's runtime, though the setup guide itself does not execute or process this external data.\n- [PRIVILEGE_ESCALATION]: Explicitly informs the developer that the application runs without a sandbox to allow unrestricted filesystem access for reading dotfiles. While this describes a high-privilege application, it is disclosed as a design requirement for the tool's functionality rather than an attempt to covertly escalate permissions.
Audit Metadata