vault-init

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses mkdir, rsync, and cp to create a directory and copy template files. It includes safeguards such as --ignore-existing and -n flags to prevent accidental data loss or overwriting of user files.
  • [INDIRECT_PROMPT_INJECTION]: The skill supports a local 'overlay' mechanism that reads additional instructions and configurations from a path defined by the $POWERSUIT_OVERLAY environment variable. This represents a potential surface where local files can influence agent behavior, though it is scoped to the local filesystem.
  • [COMMAND_EXECUTION]: Shell commands are used to verify the existence of the configuration overlay directory before attempting to read its content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 12:50 PM