levelup-init
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: Found
!scripts/bash/setup-levelup-init.shin the execution steps. This executes a shell script at the moment the skill is loaded by the agent to initialize the environment and provide metadata to the LLM context. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to scan untrusted or external codebase content to extract patterns. This creates an attack surface where malicious instructions embedded in the scanned code (comments, documentation, or code structure) could influence the Synthesis Agent's logic during pattern classification.
- [COMMAND_EXECUTION]: The skill provides instructions to execute various setup and discovery scripts (
scripts/powershell/setup-levelup-init.ps1,scripts/bash/setup-levelup-init.sh) which perform file system operations and git metadata retrieval.
Audit Metadata