skills/terminalskills/skills/starship/Gen Agent Trust Hub

starship

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the Starship binary from its official GitHub repository. It proactively includes a command to verify the SHA256 checksum of the downloaded archive before extraction.
  • [COMMAND_EXECUTION]: The skill uses various package managers (brew, apt, cargo, etc.) for installation. It also demonstrates the use of 'custom modules' which execute local shell commands (e.g., docker ps) to dynamically update the prompt content.
  • [PERSISTENCE]: The instructions guide the user to modify shell profile scripts like ~/.bashrc and ~/.zshrc to ensure the Starship prompt is initialized automatically in new terminal sessions.
  • [INDIRECT_PROMPT_INJECTION]: The starship.toml configuration file acts as an ingestion point for instructions that define prompt behavior. The skill documents the capability to run custom shell commands through this configuration, which is an intended feature of the tool, and includes specific warnings to keep these commands fast and avoid printing secrets.
  • Ingestion points: ~/.config/starship.toml
  • Boundary markers: User-defined TOML keys
  • Capability inventory: Local shell command execution via custom modules (e.g., docker ps)
  • Sanitization: None (relies on user configuration integrity)
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 07:03 AM