fedora-hyprland-installer
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages a modular set of shell scripts (detect-system.sh, install.sh, configure.sh, etc.) to automate system inspection and Hyprland setup. These scripts are invoked explicitly by the agent to ensure controlled execution.
- [PRIVILEGE_ESCALATION]: Administrative privileges are requested via sudo for package management operations (dnf install/remove) and service management. The skill follows best practices by documenting these requirements and instructing the agent to seek explicit user approval before execution.
- [DATA_EXFILTRATION]: The skill reads existing configuration files from ~/.config to create backups in ~/.local/state/fedora-hyprland-installer/backups/. No data is transmitted to external endpoints or third-party services.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local system commands such as lspci and journalctl to detect hardware and service status. Ingestion points include detect-gpu.sh and repair.sh. The risk is mitigated by the workflow requiring human review of proposed plans before any changes are applied. No specific sanitization was detected for log inputs, but the impact is confined to the local user configuration.
Audit Metadata