claude-settings-audit
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands including
ls,find, andcatto inspect the project structure and detect the technology stack and existing configurations. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external project files to generate its recommendations, creating a vulnerability surface where malicious data in those files could influence the agent's output.
- Ingestion points: Dependency and configuration files such as
package.json,pyproject.toml,Gemfile, andCargo.toml(identified in Phase 2). - Boundary markers: No specific delimiters or instructions to ignore embedded instructions are present in the prompt logic.
- Capability inventory: The skill utilizes
ls,find, andcatfor file inspection. - Sanitization: There is no evidence of sanitization or validation of the content read from external files before it is processed by the AI model.
Audit Metadata