configure
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill manages sensitive configuration and credential files.
- Accesses
~/.gemini/config/channels/discord/.env, which is used to store the sensitiveDISCORD_BOT_TOKENcredential. - Accesses
~/.gemini/config/channels/discord/access.json, which contains user identifiers (snowflakes) and access control policies. - Note: The skill implements mitigation strategies by masking the token in the status display and using restrictive file permissions.
- [COMMAND_EXECUTION]: The skill performs directory and file system permission operations.
- Uses
mkdir -pto create the required configuration directory structure. - Executes
chmod 600on the.envfile to ensure the stored bot token is only accessible by the owner. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data which represents an attack surface for embedded instructions.
- Ingestion points: User input captured via the
$ARGUMENTSparameter inSKILL.mdwhen setting the token. - Boundary markers: Absent; the skill treats the input as a literal token string without using delimiters or warnings to ignore embedded content.
- Capability inventory: Includes file system writes (
write_to_file), reads (view_file), directory creation (mkdir), and permission modification (chmod). - Sanitization: The skill performs whitespace trimming on the input token string.
Audit Metadata