scrolls-hide
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes bundled shell scripts (hide.sh and hide.ps1) to manage directory renaming and update path references. These scripts utilize standard system utilities such as git, mv, grep, and sed.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads and modifies files (STARTER.md, CLAUDE.md) that serve as the agent's working memory. While the script performs path replacement, this identifies a surface for indirect injection if these files were to contain malicious instructions.\n
- Ingestion points: scripts/hide.sh and scripts/hide.ps1 (reading file content)\n
- Boundary markers: None\n
- Capability inventory: Directory renaming (mv, git mv) and file writing (sed -i, Set-Content)\n
- Sanitization: None
Audit Metadata