starship
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the Starship binary from its official GitHub repository. It proactively includes a command to verify the SHA256 checksum of the downloaded archive before extraction.
- [COMMAND_EXECUTION]: The skill uses various package managers (brew, apt, cargo, etc.) for installation. It also demonstrates the use of 'custom modules' which execute local shell commands (e.g.,
docker ps) to dynamically update the prompt content. - [PERSISTENCE]: The instructions guide the user to modify shell profile scripts like
~/.bashrcand~/.zshrcto ensure the Starship prompt is initialized automatically in new terminal sessions. - [INDIRECT_PROMPT_INJECTION]: The
starship.tomlconfiguration file acts as an ingestion point for instructions that define prompt behavior. The skill documents the capability to run custom shell commands through this configuration, which is an intended feature of the tool, and includes specific warnings to keep these commands fast and avoid printing secrets. - Ingestion points: ~/.config/starship.toml
- Boundary markers: User-defined TOML keys
- Capability inventory: Local shell command execution via custom modules (e.g.,
docker ps) - Sanitization: None (relies on user configuration integrity)
Audit Metadata